Hi
What seems to be happening is whatever interface the PC initially authenticates to that interface it retains the mac address for that PC in it's table. So when we move the PC to a new port, that mac is still on the old port and the new port doesn't learn the mac of the PC and it just sits there with no network access. The only way to clear the issue is to shut/no shut the old interface that still has the mac address so it clears its table then plug the PC into the new port so the new port learns the mac address and then it authenticates to ISE and everything works .I don't think this is an ISE issue though because it doesn't attempt to authenticate when moving the PC to a new port.
i thought this was a mac-move issue but we running the new code and i have tried to apply the "no access-session mac-move deny" command with no luck.
please help, this issue is causing a lot of our clients roaming issue.