ISE Rules Flowchart/Connection Tracing

[usersuper]

Our site has recently installed CISCO ISE.  Might there be a way to determine or flowchart all the rules that are in place (authorization, authentication, etc.) as to assist when troubleshooting client connectivity issues?  Additionally, there appears to be some interaction with the switches/routers.  I envision including these devices in the flowchart if/when they interact with ISE.

If not readily available, how may one go about making one up as to show all of the interactions a client goes through from when the computer first starts (802.1x supplicant) until it receives it's final IP address?

I appreciate any information or suggestions that would help in this endeavor.

John

[Marvin Rhoads · Accepted solution]

There's nothing graphical.You can export the entire policy as an XML file and if your use one of the nicer XML viewers, you may find it easier to visualize the policies than looking at them in the ISE GUI

The RADIUS Live Logs (under Operations tab) however do a great job of showing a given outcome in detail.

If you're troubleshooting a client, just filter on the client (by MAC address or IP address or username or machine name etc.) and look for the failed step and click on the "Details" icon.