ISE - Computer name change gets computer disconnected

[Melghafri]

Hi,

Anyone can explain what happens here?

We are running ISE with EAP-FAST machine&user authentication.

while machine A is connected to uncontrolled port (no dot1x) and machine B is connected to controlled port (dot1x) and then we change the computer name the following will happen:

-machine A will become busy for a while ... and then a pop-up will ask to reboot.... before computer gets rebooted if we search in AD for the new computer name we will find it.

-machine B will become busy for a while ... and then a pop-up will ask to reboot... before computer gets rebooted if we search in AD for the new computer name we will NOT find it.

This only means that ISE/AnyConnect are doing something BEFORE the reboot.

Does anybody know what happens?

[nspasov]

Hi there, quick question: Are you running your ports in closed or Low-Impact mode?

Thank you for rating helpful posts!

[Melghafri]

Thanks Neno

Low-impact mode

[nspasov]

Hmm, if your pre-auth ACL is configured properly so the machine can talk to AD then this should work fine. If your ACL is fine I would suggest you check with TAC...unless someone else has an idea here. 

Thank you for rating helpful posts!