Policy Sets and Session Resume

[vibobrov]

Hi Experts,

Have a customer on ISE 2.1 Patch 2. We have a policy set that matches on Wireless_802.1x and Called_Station_ID ENDS WITH :XYZ.

In the Default Policy Set, we disabled all the rules, so anyone hitting that set will be blocked.

When users authenticate for the first time, they hit our Policy Set and get on the network fine.

However, when they come back, they go through Session Resume and fall through to the Default Policy Set. I can see in the failed event details that the Called-Station-ID comes through with the correct value.

Is this a known limitation?

Thanks

[hslai · Accepted solution]

Earlier there is a similar issue with Normalized Radius:SSID but I could find a bug for it. If you are able to recreate it in your lab, please go ahead and file one.

[vibobrov]

Funny you should say that. We are using normalized SSD there. Will change to the Called-Station-ID and retest.

[vibobrov]

Switching to Called-Station-ID solved the problem. Thanks

[Arne Bier]

Hi Victor

What was the bug Id?  I want to see if this is still an issue in ISE 2.3 patch 2