10-04-2012 11:08 AM - edited 03-10-2019 07:38 PM
My guest access through ISE is working find except I can't get it to flip the VLAN and move the guest PC to the guest VLAN. I have the Guest VLAN ID in the authorization policy. Can someone point me in the right direction with this?
Thanks,
D
10-05-2012 10:58 PM
Hi
Are you able to get mapped the right policy? Also is change of authorizatoin (COA occuring) you should see in the monitoring logs an entry where dynamic authorization succeed message?
I would check the ssid advanced settings to see if AAA Overide and Radius NAC are enabled. In settings page in ISE (under administration > settings > profiling) see if the COA has been set to "reauth"...something other than "not enabled".
If you are having issues pullling a new ip address then check the operation tab in the guest portal configuration.
Thanks,
Tarik Admani
*Please rate helpful posts*
10-09-2012 04:22 AM
It looks like COA is taking place. SSID is not an issue, this is wired Guest access. Yes, COA is set to "reauth". I see in the logs were it issues a IP release and renew to the PC but don't see where the vlan is changed or trying to change.
10-09-2012 07:26 AM
If the coa is being issued then you need to check your authorization policy to see if the user is hitting the correct policy the second time. This is where the new vlan is applied.
Sent from Cisco Technical Support Android App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide