cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
929
Views
10
Helpful
2
Replies

ISE Profiling Without DHCP Snooping

Damien Miller
VIP Alumni
VIP Alumni

I have a new ISE POC going and was testing ISE/dot1x functionality without DHCP snooping. In past deployments the customers have either been open to enabling snooping, or already had it in use.  Before saying it is a hard requirement, I have taken a minimalist approach testing without snooping. DHCP information is expectantly missing from the device sensor cache, but so far everything works as it should.  

ISE is still receiving DHCP information via IP helpers, and the authentication sessions still have an IP assigned presumably via IP device tracking.  

Some docs say snooping is optional, other say it's mandatory.  With the combination of IP helpers and IP device tracking, what would we miss if DHCP snooping wasn't implemented to enable the DHCP device sensor?  

1 Accepted Solution

Accepted Solutions

marce1000
VIP
VIP

 

 https://community.cisco.com/t5/policy-and-access/ise-and-dhcp-snooping/td-p/2473425

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

View solution in original post

2 Replies 2

marce1000
VIP
VIP

 

 https://community.cisco.com/t5/policy-and-access/ise-and-dhcp-snooping/td-p/2473425

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

With the combi of tracking and helper, dhcp snooping won't add to the
information as you already got what you want. I have configured as you
mentioned and can see dhcp options populated successfully in ISE

**** Remember to rate useful posts
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: