I have built a 0home virtual lab and it comprises the following devices: CISCO ISE 3.2, Windows Server with CA,AD,DNS roles, and an access switch serving as NTP and NAD.
ISE and AD are integrated.
ISSUE:
when i test RADIUS authentication on the switch using #test aaa group <ISEGROUP> <username> <password1> new-code,
i get User successfully authenticated message which is OK,
However, i can't see the live sessions/logs ISE, It is empty.
in an attempt to resolve the issue: I have disabled "ISE Messaging Service", generated CSR for ise messaging, and re-enabled ISE messaging, but it couldn't work.
Below are my radius configs on the switch:
aaa new-model
aaa group server radius ISEGROUP
server name ISESERVER
ip radius source-interface Vlan1
aaa authentication dot1x default group ISEGROUP
aaa authorization network default group ISEGROUP
aaa authorization auth-proxy default group ISEGROUP
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group ISEGROUP
aaa accounting system default start-stop group ISEGROUP
aaa server radius dynamic-author
client 192.168.48.2 server-key PasswordISE
aaa session-id common
ip name-server 192.168.48.11
ip device tracking
!
dot1x system-auth-control
!
interface Vlan1
ip address 192.168.48.254 255.255.255.0
!
ip default-gateway 192.168.48.4
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute 31 send nas-port-detail
radius-server dead-criteria time 5 tries 3
radius-server cache expiry 1
radius-server vsa send accounting
radius-server vsa send authentication
!
radius server ISESERVER
address ipv4 192.168.48.2 auth-port 1812 acct-port 1813
key PasswordISE
