Traffic Capture for BYOD in cisco ISE3.0

[shrijan]

Hello Everyone,

Is it possible to capture the traffic being consumed by BYOD devices?

I have Cisco ISE 3.0 in VM.

And for ISP traffic consumption i have been using Cacti 0.8v.

I think since ISE is in VM in cacti it is not showing the real bandwidth it is consuming.

Is there anyway to capture the real bandwidth it is consuming?

for the reference i have attached Cacti screen shot.

Thanks.

Regards,

shrijan

[Milos_Jovanovic]

Hi @shrijan,

ISE is acting only as AAA server, so capturing bandwidth isn't of much value here. Assuming that you want to capture ammount of bandwidth users on BYOD are generating, you would need to capture that data elsewhere (on WLC, on switch port, on SVI), as ISE is involved only untill users get their access to BYOD network. ISE is not a transit device for BYOD traffic.

BR,

Milos

[shrijan]

Hi @Milos_Jovanovic 

Thank you for the reply.

On WLC i have two SSID. One SSIS as OFFICE only for Laptop and another BYOD only for mobile devices. Both both are in separate VLANs.

Now if i capture the traffic for WLC connected switchport then if will give the traffic for both Laptop as well as Mobile devices. But i require only for Mobile devices traffic i.e. for BYOD only.

Also since BYOD is in separate vlan, i have captured the traffic for this vlan too but it does not show real traffic. It just shows the traffic in  few bits. (previous attached file was the traffic captured for BYOD Vlan interface.)

Any clue?

Thanks,

regards,

shrijan

[Milos_Jovanovic]

Hi @shrijan,

Are you using Local or FlexConnect mode?

If using Local Switching mode on WLC, you'll need to monitor each logical interface of WLC.

If using FlexConnect mode, you'll need to monitor logical interface on the equipment which is acting as default GW for BYOD segment.

BR,

Milos

[shrijan]

Hi @Milos_Jovanovic 

I am using as a Local Mode.

Can you kindly advice how do i monitor logical interface of WLC?

Let say I have two logical interfaces one for Laptops only (Mesh) and one for Mobile Phones only (BYOD).

Even though I put the details of BYOD interface to capture the traffic or to monitor the traffic but in the list to select it shows only Mesh interface. (I have attached the Picture will explain kindly have a look for the reference)

Thanks.

Regards,

Shrijan

[Milos_Jovanovic]

Hi @shrijan,

In this case, you would need to monitor interface on WLC itself, as that is the place where data for BYOD flows. For monitoring, I'm not an expert on WLC, so I don't know exactly how you can do it, but I'm assuming it is not different from other Cisco devices. By quick search, I managed to find this guide for monitoring of WLC. There, you have a reference to SNMP Object Navigator Tool, so try searching there appropriate OIDs for this.

BR,

Milos

[shrijan]

Hi @Milos_Jovanovic 

Thank You..

Let me go through it..

regards,

shrijan