03-18-2023 02:03 PM
I am using WLC5520 and I am using it in conjunction with ISE.
When ISE is redunduancy, is there a way to know which ise the client authenticates with?
For example via debug or gui
I was wondering if there is a way to check.
03-18-2023 02:33 PM
@JJJHL the ISE live log will confirm which ISE node authenticated the session.
03-18-2023 05:51 PM
Depends on what kind of authentication, Web Auth or 802.1x?
you can run debug commands on command level WLC :
> debug client <mac-add-client> > debug dot1x event enable > debug dot1x aaa enable
as mentioned you can also look on ISE Live Logs :
Navigate to Operations > RADIUS > Live Logs
03-19-2023 05:59 AM
hello @JJJHL the quickest way to find this is through GUI, if you go to the dashboards of the WLC in the section WLANs> Select the corresponding WLAN where the client is authenticating > Security > AAA servers , you will see the servers that are listed within the authentication/authorization the one marked as Server1 will be the preference where all the clients on that SSID will be authenticated with .
Let me know if that helped.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: