topic Re: IBNS 2.0 dead action auth command, in case auth server not reached in Network Access Control

IBNS 2.0 dead action auth command, in case auth server not reached

spiz — Mon, 10 Feb 2025 11:07:12 GMT

I have recently implemented IBNS 2.0 and wondering what is the command to land on a vlan should auth server not be reacheable ?

Re: IBNS 2.0 dead action auth command, in case auth server not reached

Aref Alsouqi — Mon, 10 Feb 2025 12:51:45 GMT

You define that as part of the service template that will be activated when the AAA server(s) are not reachable.

service-template CRITICAL_VLAN_ST
vlan 101

Re: IBNS 2.0 dead action auth command, in case auth server not reached

spiz — Fri, 14 Feb 2025 06:20:39 GMT

Yes I can see as part of changing from legacy to new-style IBNS 2.0 that there are now new service-templates CRITICAL_AUTH_VLAN with class-map/policy-map and service-policy applied to interfaces. This appears to have been magically taken care of with the authentication upgrade to new-style 🙂

Re: IBNS 2.0 dead action auth command, in case auth server not reached

Aref Alsouqi — Mon, 17 Feb 2025 11:25:08 GMT

Yeah that would be the case when you switch to IBNS 2.0. Check this link please for further details about IBNS 2.0:

Cisco ISE NAD Configuration Templates – Cisco ISE Tips, Tricks, and Lessons Learned