05-10-2023 02:25 AM
I upgraded cisco switch 2960x to 9300 and copied all configurations from 2960x to 9300 and I didn't have any syntax errors, however the hosts cannot be authenticated by ISE when they try to access the Internet. On the intranet everything is fine.
I ask for your support in resolving this problem.
I want the hosts to access the internet
Best regards
Solved! Go to Solution.
05-10-2023 02:30 AM
@candidolevy can you see any log entries on ISE Live Logs?
Please provide your switch configuration and the ouput of the following commands:-
show authentication session
show dot1x
show dot1x statistics
show aaa server
05-10-2023 02:30 AM
@candidolevy can you see any log entries on ISE Live Logs?
Please provide your switch configuration and the ouput of the following commands:-
show authentication session
show dot1x
show dot1x statistics
show aaa server
05-10-2023 03:05 AM
Does ISE use dynamic vlan?
05-10-2023 04:05 AM
Hello,
ISE is not using a dynamic vlan
05-10-2023 03:59 AM
05-10-2023 04:06 AM
please share the interface config
and the show ACL you apply to interface
05-10-2023 04:27 AM
Hello,
05-10-2023 04:45 AM
voice + data vlan
But you use multi-auth
You need to config multi-domian
05-10-2023 05:00 AM
Ok Sir.
Let me see the result
05-10-2023 05:13 AM
Hello @MHM Cisco World,
I still don't have internet access
05-10-2023 05:22 AM
Shut no shut the interface' to re-authz the host
05-10-2023 06:33 AM
waiting your reply
thanks
05-10-2023 06:56 AM
Hello Mr. @MHM Cisco World
I was at a meeting scheduled at the last minute.
Pardon me.
But even after restarting the interface, I still have no internet access
05-10-2023 07:20 AM
show ip access-list interface X <<-
I need to see the acl after success Authz
05-10-2023 07:34 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide