ISE Question (Eduroam)

[benolyndav]

Hi

We have a policy on ISE which use external radius servers the requests come to ISE but I'm convinced ISE isnt forwarding the Radius to the External radius Servers via the Raidius Server sequence,  what is the best way to confirm this please.??

Thanks

[Rob Ingram]

@benolyndav the Eduroam servers are setup as Radius Proxy servers?

For troubleshooting you can run tcpdump packet capture on the ISE server, just filter on the IP address of the Eduroam server to confirm communication.

[benolyndav]

Hi Rob
Should Promiscuous mode be on or off.?

Thanks

[Rob Ingram · Accepted solution]

Hi @benolyndav No, on ISE GUI you just go to Diagnostic Tools > Tcpdump and apply the filter. Screenshot from ISE 3.0, from memory on 2.x versions it looks different.

[balaji.bandi]

External means out of the network (internet),  you need to check the logs too.