Configure Radius on Cisco 9300 to Allow Hosts to Access the Internet

[candidolevy]

I upgraded cisco switch 2960x to 9300 and copied all configurations from 2960x to 9300 and I didn't have any syntax errors, however the hosts cannot be authenticated by ISE when they try to access the Internet. On the intranet everything is fine.

I ask for your support in resolving this problem.

I want the hosts to access the internet

Best regards

[Rob Ingram · Accepted solution]

@candidolevy can you see any log entries on ISE Live Logs?

Please provide your switch configuration and the ouput of the following commands:-

show authentication session
show dot1x
show dot1x statistics
show aaa server

[MHM Cisco World]

Does ISE use dynamic vlan?

[candidolevy]

Hello,

ISE is not using a dynamic vlan

[candidolevy]

[MHM Cisco World]

please share the interface config 
and the show ACL you apply to interface

[candidolevy]

Hello,

[MHM Cisco World]

voice + data vlan 

But you use multi-auth

You need to config multi-domian 

[candidolevy]

Ok Sir.

Let me see the result

[candidolevy]

Hello @MHM Cisco World,

I still don't have internet access

[MHM Cisco World]

Shut no shut the interface' to re-authz the host 

[MHM Cisco World]

waiting your reply 
thanks 

[candidolevy]

Hello Mr. @MHM Cisco World 

I was at a meeting scheduled at the last minute.

Pardon me.

But even after restarting the interface, I still have no internet access

[MHM Cisco World]

show ip access-list interface X <<- 

I need to see the acl after success Authz 

[candidolevy]