Cisco ISE - Windows Workstation not getting authorized until a port bounce is done

[edwardonelife]

Hi,

I have a situation where by a win workstation doesn't get authorised after a user logs in to the workstation.

After logging in and bouncing the port, the port gets authorized and an ACL is applied.

What could be the issue?

[Vivek Ganapathi]

Hi,

Few questions

1) Is the workstation performing dot1x?

2) What is the version of ISE?

3) Is it a windows XP or 7 or some other version of OS?

Regards

Vivek

[edwardonelife]

1) Is the workstation performing dot1x?

Yes - PEAP-MSCHAPv2

2) What is the version of ISE?

2.1 with latest patch 2

3) Is it a windows XP or 7 or some other version of OS?

Win 10 and Win 7

[edwardonelife]

Hi,

This was the problem;

interface GigabitEthernetx/0/y
dot1x timeout ratelimit-period 300

This was added after following the best practice in the Cisco Live doc below;

https://www.ciscolive.com/anz2016/connect/sessionDetail.ww?SESSION_ID=4641