cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
501
Views
0
Helpful
1
Replies

Change of authorization in ISE 3.1 anyconnect posture scan

osman869
Level 1
Level 1

I have ISE 3.1 

I have anyconnect posture agent which is changing the IP of wireless adapter after successful posture scan (compliant)

Pc becomes compliant and IP is changed from quarantine to a new IP address by DHCP.

I want to know how the wireless adapter is changing its IP to a new IP address. Is there automatic ip release/renew by anyconnect ? 

Are there any additional configuration on the ISE or wlc side ? 

Sometimes my wireless adapter is stuck in unidentified state and I need to enable or disable WiFi to get the new IP address.

 

Thanks.

1 Reply 1

Yes this is AnyConnect/Supplicant on the PC detecting the need for an IP renewal.  What you describe is a common problem in both wired and wireless dynamic VLAN environments.  Why not use a named ACL on the WLC instead?  Rather than changing VLANs?  I would also check to make sure your AnyConnect and your wireless NIC drivers are up to date.