cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1537
Views
10
Helpful
4
Replies

ISE Wired Dynamic VLAN assignment with DHCP re-new after new VLAN

MS-JK
Beginner
Beginner

The Setup:

Cisco ISE 3.x, cisco wired switch 3850. I have a port that is configured with default VLAN X and this VLAN X is also setup to get DHCP IP from 3rd party DHCP server. This switch/port is also configured for wired Dot1x. I have a MAB policy on ISE that assigns certain end-devices into specific VLAN.

The Problem:

Device A connects to the port on the swtich. It first is connected to the default VLAN X. During this time, it receives DHCP IP from the server and also undergoes Authentication/Authorization for dot1x. After successful MAB auth/authorization Cisco ISE send to the swtich to change the port VLAN to VLAN Z. This change is successful and the port is now in new vlan. BUT the problem is, the end-device that previously received DHCP for VLAN X has no idea that VLAN changed on the switch port and it never renews the IP of the new VLAN Z. So its basically stuck with wrong IP after the new dynamic VLAN.

Solution:

Is there a way to force DHCP release from the switch/ise somehow after the dynamic VLAN is assigned?

Thank you.

2 Accepted Solutions

Accepted Solutions