ISE with Pre-Auth ACL

[Abhishek Kumar]

Without a Pre-Auth ACL, dynamic VLAN push and DHCP play nicely together

With a Pre-Auth ACL allowing DHCP, the dynamic VLAN push works OK but the devices don’t re-DHCP.

So is a configuration with a port-based Pre-Auth ACL that allows DHCP and a subsequent dynamic VLAN policy incompatible due to re-DHCP issues?

Thanks

[hslai]

By Pre-Auth ACL, do you mean the one configured at each of the access port interface? Did you try permitting everything and see if it still not allowing DHCP? Anyhow, I would suggest you to reach the switch platform to debug further.