12-19-2016 06:37 AM
Hi all,
We have enabled C3PL/IBNS on a 4500-x device running 3.9 code.
But we are not able to add : (commands missing)
access-session template monitor
device-sensor accounting
Config :
device-sensor filter-list cdp list CDP-LIST
tlv name device-name
tlv name port-id-type
tlv name capabilities-type
tlv name version-type
tlv name platform-type
tlv name duplex-type
tlv number 34
!
device-sensor filter-list dhcp list DHCP-LIST
option name domain-name-servers
option name host-name
option name domain-name
option name class-identifier
option name client-identifier
!
device-sensor filter-list lldp list LLDP-LIST
tlv name system-name
tlv name system-description
tlv name system-capabilities
tlv name management-address
!
device-sensor filter-list mdns list MDNS-LIST
tlv name pointer-records
tlv name text-records
tlv name srv-records
tlv name device-version
device-sensor filter-spec mdns include list MDNS-LIST
device-sensor filter-spec dhcp include list DHCP-LIST
device-sensor filter-spec lldp include list LLDP-LIST
device-sensor filter-spec cdp include list CDP-LIST
device-sensor notify all-changes
I see :
ISETEST#show device-sensor cache all
Device: 00a6.ca36.4ae6 on port GigabitEthernet2/3
--------------------------------------------------
Proto Type:Name Len Value
LLDP 8:management-address 14 10 0C 05 01 0A 41 63 92 03 00 00 00 00 00
LLDP 6:system-description 146 0C 90 38 2E 32 2E 31 33 30 2E 30 20 28 41 49 52
2D 41 50 33 38 30 32 49 2D 45 2D 4B 39 29 2C 20
56 65 72 73 69 6F 6E 20 38 2E 32 2E 31 33 30 2E
30 0A 43 6F 70 79 72 69 67 68 74 20 28 63 29 20
31 39 38 36 2D 32 30 31 36 20 62 79 20 43 69 73
63 6F 20 53 79 73 74 65 6D 73 2C 20 49 6E 63 2E
0A 43 6F 6D 70 69 6C 65 64 20 54 75 65 20 53 65
70 20 32 37 20 30 33 3A 33 33 3A 33 35 20 50 44
54 20 32 30 31 36 20 62 79 20 6B 61 6C 61 69 72
61 6D
LLDP 5:system-name 12 0A 0A 57 41 45 56 45 4E 54 30 31 35
LLDP 7:system-capabilities 6 0E 04 00 04 00 04
CDP 11:duplex-type 5 00 0B 00 05 01
CDP 6:platform-type 20 00 06 00 14 41 49 52 2D 41 50 33 38 30 32 49 2D
45 2D 4B 39
CDP 5:version-type 157 00 05 00 9D 43 69 73 63 6F 20 41 50 20 53 6F 66
74 77 61 72 65 2C 20 41 49 52 2D 41 50 33 38 30
32 49 2D 45 2D 4B 39 20 56 65 72 73 69 6F 6E 3A
20 38 2E 32 2E 31 33 30 2E 30 0A 54 65 63 68 6E
69 63 61 6C 20 53 75 70 70 6F 72 74 3A 20 68 74
74 70 3A 2F 2F 77 77 77 2E 63 69 73 63 6F 2E 63
6F 6D 2F 74 65 63 68 73 75 70 70 6F 72 74 0A 43
6F 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31
34 2D 32 30 31 35 20 62 79 20 43 69 73 63 6F 20
53 79 73 74 65 6D 73 2C 20 49 6E 63 2E
CDP 4:capabilities-type 8 00 04 00 08 00 00 00 03
CDP 3:port-id-type 20 00 03 00 14 47 69 67 61 62 69 74 45 74 68 65 72
6E 65 74 30
CDP 1:device-name 14 00 01 00 0E 57 41 45 56 45 4E 54 30 31 35
So the switch has the info - but we are not able to see in ISE :
Attribute List
AAA-Server
isetest03
BYODRegistration
Unknown
Calling-Station-ID
00-A6-CA-36-4A-E6
DestinationIPAddress
10.101.40.211
DeviceRegistrationStatus
NotRegistered
ElapsedDays
0
EndPointPolicy
DR-Cisco-Access-Point
EndPointProfilerServer
isetest03.net.dr.dk
EndPointSource
RADIUS Probe
Framed-IP-Address
10.65.99.146
IdentityGroup
DR-Cisco-Access-Point
InactiveDays
0
LastNmapScanTime
2016-Dec-07 15:21:37 CET
MACAddress
00:A6:CA:36:4A:E6
MatchedPolicy
DR-Cisco-Access-Point
NADAddress
10.255.253.13
NAS-IP-Address
10.255.253.13
NAS-Port-Id
GigabitEthernet2/3
NAS-Port-Type
Ethernet
NmapScanCount
3
OUI
Cisco Systems, Inc
PolicyVersion
226
PostureApplicable
Yes
StaticAssignment
false
StaticGroupAssignment
false
Total Certainty Factor
80
User-Name
00a6ca364ae6
ip
10.65.99.146
lldpCacheCapabilities
B
lldpCapabilitiesMapSupported
B
lldpSystemDescription
8.2.130.0 (AIR-AP3802I-E-K9), Version 8.2.130.0 Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Tue Sep 27 03:33:35 PDT 2016 by kalairam
lldpSystemName
WAEVENT015
Is the text in RED from device sensor or ?
Best regards
Tue
Solved! Go to Solution.
12-20-2016 04:46 PM
Those lldp attributes may also come from SNMP probe earlier. You may use TCPDUMP to capture the RADIUS exchanges between ISE and NAD to confirm whether the 4500x sending device sensor info via accounting interim updates.
As to the missing commands, best to consult the switch support team. Device Sensor on Cat 3650 with IOS XE 3.6.4 rel... | Cisco Communities is a similar inquiry previously.
06-28-2019 01:43 PM
device-sensor notify all-changes
access-session attributes filter-list list ALIST
cdp
lldp
dhcp
access-session authentication attributes filter-spec include list ALIST
access-session accounting attributes filter-list list PLIST
protocol cdp
protocol lldp
protocol dhcp
access-session accounting attributes filter-spec list PLIST
12-20-2016 04:46 PM
Those lldp attributes may also come from SNMP probe earlier. You may use TCPDUMP to capture the RADIUS exchanges between ISE and NAD to confirm whether the 4500x sending device sensor info via accounting interim updates.
As to the missing commands, best to consult the switch support team. Device Sensor on Cat 3650 with IOS XE 3.6.4 rel... | Cisco Communities is a similar inquiry previously.
06-28-2019 01:43 PM
device-sensor notify all-changes
access-session attributes filter-list list ALIST
cdp
lldp
dhcp
access-session authentication attributes filter-spec include list ALIST
access-session accounting attributes filter-list list PLIST
protocol cdp
protocol lldp
protocol dhcp
access-session accounting attributes filter-spec list PLIST
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide