IBNS 2.0 dead action auth command, in case auth server not reached

[spiz]

I have recently implemented IBNS 2.0 and wondering what is the command to land on a vlan should auth server not be reacheable ?

[Aref Alsouqi]

You define that as part of the service template that will be activated when the AAA server(s) are not reachable.

service-template CRITICAL_VLAN_ST
   vlan 101

[spiz]

Yes I can see as part of changing from legacy to new-style IBNS 2.0 that there are now new service-templates CRITICAL_AUTH_VLAN with class-map/policy-map and service-policy applied to interfaces.  This appears to have been magically taken care of with the authentication upgrade to new-style

[Aref Alsouqi]

Yeah that would be the case when you switch to IBNS 2.0. Check this link please for further details about IBNS 2.0:

Cisco ISE NAD Configuration Templates – Cisco ISE Tips, Tricks, and Lessons Learned