Change of Vlan Authorization profile not getting applied on switch, after authentication trough ISE

[paragmahajan40]

Hi,

I  am trying to authenticate dot1x enabled wired endpoints through ISE.  Initially after successful authentication , Authorization is set for to  apply dAcl on Switch port. got expected result for same .

But when I try to apply  Change of Vlan Auth profile(Instead of dAcl Authorization profile), did not get expected result.

1) ISE logs shows correct change of vlan authorization  profile getting applied.

2) But when we checked on switch, it shows same old Vlan ,new profile is NOT ACTUALLy getting applied.

Any pointer how to troubleshoot.

[nspasov]

Can you post screen shots form the details screen for the successful event? Also, post the output of the command "show authentication session interfaces x/y" after the authentication succeeds.

[paragmahajan40]

Hi Neno,

Thanks for reverting back. We have been using 2960 switch with IOS 12.2(52) SE (According to Trustsec 2.0 guideline). After upgrading it to 12.2(55) SE6 , Problem got resolved .

[nspasov]

Very good! Glad you were able to find a solution! You should probably close the thread