Device-Sensor for Profiling

[Terence Lockette]

Hello everyone,

I have a simple question pertaining to the device-sensor feature on Cisco switches and ISE.  The majority of my environment supports device sensor.  However, there are a handful of devices that doesn't.  Since device sensor collects info on endpoints via CDP, LLDP, and DHCP, would it make sense to use DHCP relay on my SVIs to support the switches that don't support device sensor?  Or should I use both (DHCP relay and device sensor)?  I would suspect that using both would cause ISE to receive the same data about endpoints twice for those connected to device sensor supported switches.  Also, if I have to use relay method for DHCP, can I use device sensor for CDP & LLDP only and not specify a filter for DHCP?

Let me also say that I'm looking to replace the handful of switches that don't support device sensor with those that do but that's not confirmed as of yet.

Terence

[Rob Ingram]

Hi Terence,
As you said, I would use device sensor on the switches that support it and rely on the other probes on the devices that do not, until you replace them. In device sensor you do have the ability to determine what you protocols and/or attributes you want to include/exclude, so if you were concerned you could exclude DHCP if you were getting that information from elsewhere.

Depending on the size of your deployment, I don't foresee any reason why ISE could not easily handle information from device sensor and DHCP probe.

HTH