ISE compatibility with 3850 IOS 3.6.7bE

[waqas gondal]

Hello,

I ran into an issue when enforcing 802.1x authentication on a switch stack with a different IOS from our other 3850 stacks.

This is a new issue where the attached PC shows as authenticated correctly on the switchport and on ISE but the PC can't connect. It is not for all PCs connected to this stack, only a few random cases.

We are not using anyconnect, it is just the native windows supplicant with machine cert auth. 

I'm wondering if the IOS of the switch, which is 3.6.7bE, could be an issue. The IOS on most working stacks is 16.6.6.

Is there anything else I may have missed?

Merry Christmas!

Waqas

[marce1000]

 - Check compatibility info's start from here :

                   https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

 M.

[waqas gondal]

Thanks Marc,

I checked that chart and it doesn't mention the IOS I am on. I'm guessing I should upgrade.

[marce1000 · Accepted solution]

          - Yes , you should use a supported IOS

 M.

[balaji.bandi]

worth Considering Upgrading IOS and test :

https://www.ise-support.com/2018/01/22/cisco-3850-fails-to-send-dot1x-authentications-after-denali-upgrade/

[waqas gondal]

Hi Balaji,

I read that link and they had a different issue. I have the pae authentication configured on the switches.