topic Re: Network device SNMP proflie info in Network Access Control

Network device SNMP proflie info

manvik — Thu, 30 Jan 2025 16:10:33 GMT

https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456 referring this guide, is it possible to get details of systems connected to a Cisco switch in ISE profile endpoints context visibility section.
The switch ports are not 802.1x/AAA, SNMP configured. The 802.1x, AAA and SNMP are configured globally in switch. Switch sends SNMP traps to ISE on new connections. SNMP is V3.

Re: Network device SNMP proflie info

ahollifield — Thu, 30 Jan 2025 17:27:01 GMT

So is 802.1X and AAA configured or not? Why not use Device Sensor? What is the NAD? Why are you using SNMP Traps? Are you using Easy Connect?

https://community.cisco.com/t5/security-knowledge-base/profiling-wired-endpoints-without-802-1x-or-mab-using-ibns2-0/ta-p/5073148

Re: Network device SNMP proflie info

manvik — Fri, 31 Jan 2025 06:32:45 GMT

The 802.1x, AAA and SNMP are configured globally in switch. NAD is Cisco catalyst switch.
The goal is to identify devices connected to non-confgured ports in a switch.

Re: Network device SNMP proflie info

ahollifield — Fri, 31 Jan 2025 11:12:47 GMT

Click the link I shared. You have to apply some commands on the port level? What exact model if switch? What version of IOS-XE?

Re: Network device SNMP proflie info

manvik — Sat, 01 Feb 2025 05:23:05 GMT

IOS version version 15.2, model is catalyst 1000 series.

Re: Network device SNMP proflie info

ahollifield — Sat, 01 Feb 2025 10:48:47 GMT

What exact model? This is a 1000 series right? Not a 1200 or 1300? The 1200 and 1300 do not run IOS