Hello together
I got a Cat2960S (15.2(2)E5) and a Cat2960X (15.2(4)E1) configured with IBNS 2.0. Everything is working fine from an authentication and authorization perspective but the switch does not send the device sensor data to ISE via RADIUS accounting. Therefore profiling for some devices is not working. The RADIUS profiling probe is activated in ISE.
In IBNS 1.0 i had to use the device-sensor accounting command, but this command is not available anymore under IBNS 2.0.
Currently I have the following device sensor and accounting configuration:
aaa group server radius ISE
server-private 10.40.250.234 auth-port 1812 acct-port 1813 test username RADIUS-TEST idle-time 30 key XYZ
ip radius source-interface Vlan2030
!
aaa authentication dot1x default group ISE
aaa authorization network default group ISE
aaa accounting update newinfo periodic 5
aaa accounting identity default start-stop group ISE
!
aaa server radius dynamic-author
client 10.40.250.234 server-key XYZ
!
device-sensor filter-list cdp list CDP-FILTER
tlv name device-name
tlv name platform-type
device-sensor filter-spec cdp include list CDP-FILTER
device-sensor notify all-changes
access-session attributes filter-list list DEVICE-SENSOR
cdp
access-session accounting attributes filter-spec include list DEVICE-SENSOR
Any idea's how to get the device sensor data to ISE with IBNS 2.0? Am I missing a configuration parameter?
Best regards
Martin
