cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3209
Views
10
Helpful
8
Replies

Cisco ISE IP Renewal not working

Hi all,

I am setting up a CWA with Cisco ISE to authenticate Guests and Employees by Web and assign them to Two different vlans. The authentication pass. The authZ Profiles are affected. but The IP address did not change according to vlan until I renew it manually from console ( >ipconfig /release >ipconfig /renew). I desactivated Java in browsers, I activated it again and added the IP of the ISE to the Exception List in Java setting but the IP address still not change automatically.

Any Ideas how to fix this Issue?
 

Thank you.

8 Replies 8

mohanak
Cisco Employee
Cisco Employee

check delay to release,delay to CoA ,delay to renew  setting

 

delay to release time should be low since it needs to occur  immediately  after the applet is downloaded and before the Cisco ISE  server directs  the NAD to re-authenticate with a CoA request. The  default release  value is 1 second.

 

the delay to CoA delays the Cisco ISE from executing the CoA. Here,   enough time should be given to allow the applet to download and perform   the IP release on the client. The default value is 8 seconds.

 

The delay to renew value is added to the IP release value and does not   begin timing until the control is downloaded. The renew should be given   enough time so that the CoA is allowed to process and the new VLAN   access granted. The default value is 12 seconds.