ISE3.0 logs doesnt show client IP Address

[osman869]

Hi 

For ise 3.0 i have tried with multiple users wired/wirless my endpoints are getting the IP address but its not shown on the ISE Logs.

Any idea?

[balaji.bandi]

is that worked before ? or new setup ?

what end device (i mean switch, what config ?)

Where are you looking, Look at the Live logs ?

[osman869]

Hi 

I have tried on the Wireless the End Point is HP Laptop (I can see the IP address on the device but on the Radiud Live Logs, IP field is empty)

The same case is with host based authentication its in the right vlan got the IP as well but logs, no ip infoemtion.

[balaji.bandi]

check the probe :

https://community.cisco.com/t5/network-access-control/ip-address-is-empty-in-live-sessions-of-ise/td-p/4489405

[Arne Bier]

The IP address is always blank for RADIUS CoA (Change of Authorization). But when doing NAC on a Cisco switch you should always enabled Device Tracking.  And while you're at it, enable the Cisco Device Sensor feature to send DHCP/CDP/LLDP/HTTP data to ISE to learn more about the endpoint. Caution: for DHCP profiling to work, you need to also enable DHCP Snooping on the switch! Now you're getting into profiling and this of course needs the ISE 3.x Advantage  or ISE 2.x Plus licenses. 

[Rob Ingram · Accepted solution]

@osman869 do you have device tracking enabled?

https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515