Hello group,
I am facing a strange problem with my ISE deployment.
In test environment I have used ISE from version 1.0 to the latest. Currenty what I have is 1.1.1 wit latest patch.
I have configured dot1x and central web authentication for WIRED guest with ISE. In the test environment I am using WS-C3750G-48PS with C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(55)SE6, RELEASE SOFTWARE (fc1) IOS.
Everything is working as expected. To give a brief,
dot1x is working perfect with active directory authentication.
if an end station is not having a dot1x capability, it will fail back to webauth.
In webauth, both guest and domain users can login, according to the identity group, domain user will have normal access and guest will have internet only access.
In any case if the dot1x is failing, the user will be redirected to webauth, then again the same authorization is given as per the user role.
All this configuration works great with the test environment. But when I move on to production, where I have the only change in the access switch, things will get weird.
I have WS-C3750E-48PD switch stacks in production. There is no ipservice image for 3750E, . There are only ipbase and univeral image for 3750E and universal is not supporting dot1x configurations in interface so I am using ipbase image. And I tried from 12.2.55(SE6) to 15.0.3-SE(ED) images and copied the configurations from my test environment to this production and things are going weird.
Sometimes I will get the webauth working. But then everything will just stop working, I wont get a redirection page to ise, nothing. If I give a switch reboot, the things will again work good for sometime then again goes for a toe. The most weird is that I won't get a clue in my ISE box, no authentication logs nothing.
Can anybody help me out.
My switch config (general ) is attached here.
