Unable to collect dhcp information using device-sensor for profiling.

[twan.wing]

Hi

I am trying to do dot1x/MAB authentication (there is no issue here), but I want to collect dhcp information of the devices asking for IP address from dhcp-server for profiling using device-sensor (cdp is being collected - no issue) but when I check for dhcp # show device-sensor cache all, there is no single entry for dhcp data. 

The dhcp server is on the switch where these devices are trying to access the network from and this should be the case. However, I noticed the following which I do not know if it is related (from #debug device-sensor error) - same error appear with different X value.

DSensor: NULL input physical interface, discarding packetRejecting packet on SVI Interface VlanX

I am more concerned about collecting the attributes now rather than sending them..! 

Switch IOS: Version 15.0(2)SE9

any suggestions? 

[nspasov]

Hi there, I have a couple of questions:

1. Are any of the devices using static IPs?

2. What model switch are you using?

3. Can you post the output of your device-sensor configs?

4. Do you have the RADIUS probe enabled in ISE?

Thank you for rating helpful posts!

[twan.wing]

Hi Neno,

1. none of them is using static IP.

2. 3750-x

3. 

device-sensor accounting

device-sensor notify all-changes

device-sensor filter-list dhcp list Users_att
option name host-name
option name requested-address
option name parameter-request-list
option name class-identifier
option name client-identifier
option name user-class-id
device-sensor filter-spec dhcp include list Users_att

aaa accounting dot1x default group radius

radius-server vsa send accounting

access-session template monitor

4. Yes, Radius and DHCP probes are enabled,

[nspasov · Accepted solution]

A couple of more questions:

1. Do you have dhcp snooping enabled?

2. Do you see bindings in the dhcp snooping database?

Thank you for rating helpful posts!

[twan.wing]

Thank you veery veery much. now Devic-Sensor is collecting the data after enabling dhcp-snooping globally and on the the vlans which the users are connected to.

Dhcp-snooping was not enabled for me, but after enabling device-sensor cache shows dhcp data. Thanks again :)

[nspasov]

You are welcome! Glad I was able to help! :)

[bledi_vako]

I have a very similar issue, and I do have DHCP Snooping enabled as well.

But the DHCP information is not showing in the output of "show device-sensor cache", and ISE is not profiling neither Cisco IP phones.