After Insert "Access session closed", necessary to "shut no shut" the interface?

[getaway51]

Hi,

Currently the port is running on monitor mode with " no access-session closed"

I can see the endpoint in ISE.

I insert a new command " access-session closed"

Do i need to "shut and no shut" the interface? or will it re-authenticate? any difference in ISE logs, sessions or Context visibility when change of mode?

[howon]

Best practice is to shut/no shut after the command as to clear any inconsistencies.

[getaway51]

Hi,

Previously when configuring monitor mode, already "shut and no shut" 

Now insert ""Access session closed"", need to do it again? 

[getaway51]

Hi,

It is very strange, after i insert "access session closed", it seems tht everythign was blocked after i "shut, no shut" the port.

Is there any other settings need to change?

The MAC address was already under correct Identity group. Anything tht I missed out probably?

[hslai]

If auth success in ISE and only blocked on the switch, likely the switch does not like some of the attributes sent down from ISE.

I would try simpler authz profile(s) if I were you.