Hi Cisco Community,
I was trying to Lab Cisco ISE Dynamic Vlan assignment and observed users is getting authenticated and hitting right Authorization policy and authorized but vlan assignment is not happening.
Please find attached screenshots of my configuration.
Switch#show running-config | se aaa
aaa new-model
aaa group server radius ISE
server name ISE1
aaa authentication dot1x default group ISE
aaa authorization auth-proxy default group ISE
aaa accounting update newinfo periodic 1440
aaa accounting dot1x default start-stop group ISE
aaa accounting system default start-stop group ISE
aaa server radius dynamic-author
client 192.168.2.20 server-key cisco123
auth-type any
aaa session-id common
Switch#show running-config | se radius
aaa group server radius ISE
server name ISE1
aaa server radius dynamic-author
client 192.168.2.20 server-key cisco123
auth-type any
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute 31 mac format ietf upper-case
radius-server attribute 31 send nas-port-detail mac-only
radius-server dead-criteria time 15 tries 3
radius-server deadtime 15
radius server ISE1
address ipv4 192.168.2.20 auth-port 1812 acct-port 1813
key cisco123
Switch#show running-config interface ethernet 0/1
Building configuration...
Current configuration : 331 bytes
!
interface Ethernet0/1
switchport access vlan 6
switchport mode access
authentication control-direction in
authentication host-mode multi-auth
authentication order dot1x
authentication priority dot1x
authentication port-control auto
authentication periodic
authentication violation restrict
dot1x pae authenticator
end.
attached ISE configuration images.
