07-13-2019 02:35 PM
Trying to use logical profile based on LLDP system-capabilities information in authorization rule but it doesn't work because information is only transmitted to ISE in RADIUS Attribute Value Pair inside accounting request, and the accounting only happens after an RADIUS access-accept.
The only way I can workaround this issue for now is using a rule with temporary access so it can triggers the RADIUS accounting packet to transmit the LLDP cache information to ISE.
Solved! Go to Solution.
07-16-2019 05:55 PM
It might depend on the IOS-XE release or platform or ISE release. Also check the filter-list used for LLDP.
In discussing Device Sensor Filter Lists and MUD Profling, I found our teams tested it working with ISE 2.6 and IOS-XE 16.9.1 on 3850.
07-17-2019 04:12 PM
No filter configured. I assume this means all the information should be transmitted to ISE. Is this correct?
07-20-2019 12:56 PM
Yes, I would have assumed so.
07-21-2019 10:26 AM
Summing up:
1. The phone information is in the switch LLDP cache
2. No device-sensor filter-list lldp is configured (all the information is kept)
3. mac address-table notification change, mac address-table notification mac-move and snmp trap mac-notification are configured
4. snmp queries are enabled
It should work but it doesn't ...
Is there a way to understand what information is send on SNMP query response packets?
07-21-2019 03:28 PM - edited 07-21-2019 03:29 PM
Is there a way to understand what information is send on SNMP query response packets?
We should be able to see the info in the SNMP responses in the wired packet captured on SNMP traffic between the ISE PSN and the NAD, if using SNMP v1 or v2c.
In this particular use case that snmpQuery triggered by either snmpTrap or account start, there are some known issues -- CSCvm70858 and CSCuw50171. I think it best to get a Cisco TAC case open to help gathering debug data and/or recreate.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide