topic Re: CSCwh73915 - Static IP Assignment not working -solution in Network Access Control

CSCwh73915 - Static IP Assignment not working -solution

kothare — Fri, 18 Oct 2024 19:34:34 GMT

CSCwh73915 - Static IP Assignment not working using attribute msRADIUSFramedIPAddress when posture is enabled.

Solution:

We can assign static IP, if we use parameter radius ip address= msRADIUSFramedIPAddress in Posture unknown authorization profile.

Then there is no need to assign the radius ip address parameter in COA Authorization .

I have tested and its working fine.

1. posture unknown authz profile have parameter radius ip address= msRADIUSFramedIPAddress. --> Will have same static IP for that user

2.once its complaince , COA , authz profile - required applied.

Re: CSCwh73915 - Static IP Assignment not working -solution

ahollifield — Mon, 21 Oct 2024 17:53:13 GMT

What exactly is your question?

https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356

Re: CSCwh73915 - Static IP Assignment not working -solution

tyoung008 — Fri, 03 Apr 2026 01:26:08 GMT

Hi @kothare ,

Thank you, thank you, thank you! Your workaround fixed the issue for me. That makes so much sense! The IP address is assigned with the 1st authorization profile from ISE, not the 2nd.

For those that do not understand, the bug CSCwh73915 does NOT have a workaround listed. @kothare was kind enough to post a solution. Thank you!

I had the IP address attribute specified in the posture compliant authorization profile, the 2nd one used. Once I moved it to the posture redirect authorization profile, the 1st one used, it works!

Thank you again!

Tom