01-14-2019 08:53 AM - edited 03-11-2019 01:53 AM
Hi
I'm attemping to automatically configure an interface using a template. The template is already on the switch, ISE is pushing the template name with the Authz. Standard IBNS 2.0 stuff.
Config here:
template APAutoConfig
switchport trunk native vlan 120
switchport mode trunk
access-session host-mode multi-hostaccess-session interface-template sticky timer 10
template Dot1x-Port
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast edge
switchport access vlan 120
switchport mode access
switchport voice vlan 170
mab
access-session port-control auto
authentication periodic
authentication timer reauthenticate server
service-policy type control subscriber DOT1X_AND_MAB
description - Dot1x -
interface GigabitEthernet1/0/22
no logging event link-status
access-session closed
no snmp trap link-status
snmp ifindex persist
source template Dot1x-Port
spanning-tree portfast edge
I'm on Version 15.2(4)E7. The APAutoConfig template gets applied, then seconds later gets unapplied and it goes through this constantly, every 3-20 seconds.
TEMPLATE EVENT: Gi1/0/22: Unbinding template APAutoConfig
TEMPLATE EVENT: APAutoConfig :ccb_bound(FALSE), visible(TRUE), pref_count(0)
TEMPLATE EVENT: Gi1/0/22: Binding template APAutoConfig
What's going on here? I've taken each line out of the base Dot1x-Port to see if it's causing a problem but it's made no change. Changing the sticky timer made no difference. I'm sure this worked on an older IOS version because I tested it before putting it on this switch config. I had to update for another reason - I've tried 2 different IOS versions - and it's simply not working. Is this a bug or am I missing something here?
Thanks