cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1806
Views
5
Helpful
2
Replies

ISE: dACL not overwriting pre auth ACL

K_L
Level 1
Level 1

I am having an issue where some interfaces are having the pre auth ACL take precedence over the dACL. I can see the machines authenticating normally with do1x. The dACL is being applied to the interface permitting traffic. Yet, the machine is having its traffic blocked by the pre auth ACL. When the pre-auth ACL is removed from the interface, they have proper access again. This doesn't seem to happen uniformly. Even within the same switch, some interfaces will be effected while others aren't. Has anyone seen this before?

1 Accepted Solution

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

ACL precedence depends on the network access devices. If you are using Cisco catalyst switches, try the latest release of the train. If that does not help, engage Cisco TAC. If other devices, please contact their platform support team.

View solution in original post

2 Replies 2

hslai
Cisco Employee
Cisco Employee

ACL precedence depends on the network access devices. If you are using Cisco catalyst switches, try the latest release of the train. If that does not help, engage Cisco TAC. If other devices, please contact their platform support team.

Thanks! Yes, these are all Cisco devices. I just had it happen again with a different switch. I'm going to open a TAC case.