Hi all, I have what I hope is a pretty simple question / issue. Just recently kicked off dot1x wired in monitor mode and I'm profiling phones, APs, and printers fine for the most part. In my policy, I have entries matching the endpoint profile that should permit access. The issue is that when I enable dot1x on the ports and they hit ISE, they match the default policy. If I clear the authentication on the ports with these devices, they'll then hit the right policy. I've set the profiling policy to do a COA reauth afterwards hoping that'd send it back through the policy process but so far it's not.
Is there something I'm missing or is that just how it's designed? My concern is that when we go to low impact, a new device will get plugged in and it won't hit the right policy until it reconnects.
Thanks in advance!
