cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1792
Views
0
Helpful
2
Replies

Device-sensor accounting missing in 3.9 software (4500x)

tuenoerg
Cisco Employee
Cisco Employee

Hi all,

We have enabled C3PL/IBNS on a 4500-x device running 3.9 code.

But we are not able to add : (commands missing)

access-session template monitor

device-sensor accounting

Config :

device-sensor filter-list cdp list CDP-LIST

tlv name device-name

tlv name port-id-type

tlv name capabilities-type

tlv name version-type

tlv name platform-type

tlv name duplex-type

tlv number 34

!        

device-sensor filter-list dhcp list DHCP-LIST

option name domain-name-servers

option name host-name

option name domain-name

option name class-identifier

option name client-identifier

!       

device-sensor filter-list lldp list LLDP-LIST

tlv name system-name

tlv name system-description

tlv name system-capabilities

tlv name management-address

!       

device-sensor filter-list mdns list MDNS-LIST

tlv name pointer-records

tlv name text-records

tlv name srv-records

tlv name device-version

device-sensor filter-spec mdns include list MDNS-LIST

device-sensor filter-spec dhcp include list DHCP-LIST

device-sensor filter-spec lldp include list LLDP-LIST

device-sensor filter-spec cdp include list CDP-LIST

device-sensor notify all-changes

I see :

ISETEST#show device-sensor cache all

Device: 00a6.ca36.4ae6 on port GigabitEthernet2/3

--------------------------------------------------

Proto Type:Name                       Len Value

LLDP     8:management-address          14 10 0C 05 01 0A 41 63 92 03 00 00 00 00 00

LLDP     6:system-description         146 0C 90 38 2E 32 2E 31 33 30 2E 30 20 28 41 49 52

                                          2D 41 50 33 38 30 32 49 2D 45 2D 4B 39 29 2C 20

                                          56 65 72 73 69 6F 6E 20 38 2E 32 2E 31 33 30 2E

                                          30 0A 43 6F 70 79 72 69 67 68 74 20 28 63 29 20

                                          31 39 38 36 2D 32 30 31 36 20 62 79 20 43 69 73

                                          63 6F 20 53 79 73 74 65 6D 73 2C 20 49 6E 63 2E

                                          0A 43 6F 6D 70 69 6C 65 64 20 54 75 65 20 53 65

                                          70 20 32 37 20 30 33 3A 33 33 3A 33 35 20 50 44

                                          54 20 32 30 31 36 20 62 79 20 6B 61 6C 61 69 72

                                          61 6D

LLDP     5:system-name                 12 0A 0A 57 41 45 56 45 4E 54 30 31 35

LLDP     7:system-capabilities          6 0E 04 00 04 00 04

CDP     11:duplex-type                  5 00 0B 00 05 01

CDP      6:platform-type               20 00 06 00 14 41 49 52 2D 41 50 33 38 30 32 49 2D

                                          45 2D 4B 39

CDP      5:version-type               157 00 05 00 9D 43 69 73 63 6F 20 41 50 20 53 6F 66

                                          74 77 61 72 65 2C 20 41 49 52 2D 41 50 33 38 30

                                          32 49 2D 45 2D 4B 39 20 56 65 72 73 69 6F 6E 3A

                                          20 38 2E 32 2E 31 33 30 2E 30 0A 54 65 63 68 6E

                                          69 63 61 6C 20 53 75 70 70 6F 72 74 3A 20 68 74

                                          74 70 3A 2F 2F 77 77 77 2E 63 69 73 63 6F 2E 63

                                          6F 6D 2F 74 65 63 68 73 75 70 70 6F 72 74 0A 43

                                          6F 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31

                                          34 2D 32 30 31 35 20 62 79 20 43 69 73 63 6F 20

                                          53 79 73 74 65 6D 73 2C 20 49 6E 63 2E

CDP      4:capabilities-type            8 00 04 00 08 00 00 00 03

CDP      3:port-id-type                20 00 03 00 14 47 69 67 61 62 69 74 45 74 68 65 72

                                          6E 65 74 30

CDP      1:device-name                 14 00 01 00 0E 57 41 45 56 45 4E 54 30 31 35

So the switch has the info - but we are not able to see in ISE :

Attribute List

AAA-Server

isetest03

BYODRegistration

Unknown

Calling-Station-ID

00-A6-CA-36-4A-E6

DestinationIPAddress

10.101.40.211

DeviceRegistrationStatus

NotRegistered

ElapsedDays

0

EndPointPolicy

DR-Cisco-Access-Point

EndPointProfilerServer

isetest03.net.dr.dk

EndPointSource

RADIUS Probe

Framed-IP-Address

10.65.99.146

IdentityGroup

DR-Cisco-Access-Point

InactiveDays

0

LastNmapScanTime

2016-Dec-07 15:21:37 CET

MACAddress

00:A6:CA:36:4A:E6

MatchedPolicy

DR-Cisco-Access-Point

NADAddress

10.255.253.13

NAS-IP-Address

10.255.253.13

NAS-Port-Id

GigabitEthernet2/3

NAS-Port-Type

Ethernet

NmapScanCount

3

OUI

Cisco Systems, Inc

PolicyVersion

226

PostureApplicable

Yes

StaticAssignment

false

StaticGroupAssignment

false

Total Certainty Factor

80

User-Name

00a6ca364ae6

ip

10.65.99.146

lldpCacheCapabilities

B

lldpCapabilitiesMapSupported

B

lldpSystemDescription

8.2.130.0 (AIR-AP3802I-E-K9), Version 8.2.130.0 Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Tue Sep 27 03:33:35 PDT 2016 by kalairam

lldpSystemName

WAEVENT015

Is the text in RED from device sensor or ?

Best regards

Tue

2 Accepted Solutions

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

Those lldp attributes may also come from SNMP probe earlier. You may use TCPDUMP to capture the RADIUS exchanges between ISE and NAD to confirm whether the 4500x sending device sensor info via accounting interim updates.

As to the missing commands, best to consult the switch support team. Device Sensor on Cat 3650 with IOS XE 3.6.4 rel... | Cisco Communities is a similar inquiry previously.

View solution in original post

Peter Koltl
Level 7
Level 7
device-sensor notify all-changes

 

access-session attributes filter-list list ALIST
 cdp
 lldp
 dhcp
access-session authentication attributes filter-spec include list ALIST


access-session accounting attributes filter-list list PLIST
 protocol cdp
 protocol lldp
 protocol dhcp
access-session accounting attributes filter-spec list PLIST

 

View solution in original post

2 Replies 2

hslai
Cisco Employee
Cisco Employee

Those lldp attributes may also come from SNMP probe earlier. You may use TCPDUMP to capture the RADIUS exchanges between ISE and NAD to confirm whether the 4500x sending device sensor info via accounting interim updates.

As to the missing commands, best to consult the switch support team. Device Sensor on Cat 3650 with IOS XE 3.6.4 rel... | Cisco Communities is a similar inquiry previously.

Peter Koltl
Level 7
Level 7
device-sensor notify all-changes

 

access-session attributes filter-list list ALIST
 cdp
 lldp
 dhcp
access-session authentication attributes filter-spec include list ALIST


access-session accounting attributes filter-list list PLIST
 protocol cdp
 protocol lldp
 protocol dhcp
access-session accounting attributes filter-spec list PLIST