Hello, need help please
I'm implementeing a Cisco ISE 2.1 deployment, testing CCP and Posture, MAC OX devices doesn´t recirect to CCP ISE portal, also installing posture agent offline, MAC Devices does not reach the ISE serververs. Windows devices works fine in the same scenario.
Port-config:
interface GigabitEthernet1/0/36
description SSLR
switchport mode access
switchport voice vlan 38
ip access-group ACL-DEFAULT in
speed 100
duplex full
authentication event fail action next-method
authentication event server dead action reinitialize vlan 501
authentication event server dead action authorize voice
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
dot1x timeout tx-period 5
spanning-tree portfast
spanning-tree bpduguard enable
end
ACL
ip access-list extended ISE-Posture
deny udp any any eq bootps
deny ip any host 172.31.241.105
deny ip any host 172.31.241.106
deny udp any any eq domain
permit tcp any any eq www
permit tcp any any eq 443
deny ip any any
ip access-list extended ACL-DEFAULT
permit udp any any eq domain
permit udp any any eq bootps
permit icmp any any
permit udp any any eq tftp
permit ip any host 172.31.241.105
permit ip any host 172.31.241.106
permit ip any host 172.31.9.10
permit ip any host 172.20.2.10
deny ip any any
Thanks
