Hello everybody,
I just wanted to share an experience we made with auto-smartport macro. Maybe someone has made similar experience or has an idea.
Our Cisco ISE environment is profiling our Meraki AP´s and sending a Radius message to apply Auto-Smartport Macro.
With only a few AP´s connected it works great.
But when connecting multiple AP´s (for example during reload of a switch) the macro is not executed reliable on the switch.
Some ports are getting configured correct, on other ports the macro seems to break:
Here is the Macro that is defined on the switch:
!
macro auto execute config-meraki-ap {
if [[ $LINKUP == YES ]]
then conf t
default interface $INTERFACE
interface $INTERFACE
macro description $TRIGGER
source template MERAKI-AP-WIFI-2.0
device-tracking attach-policy DEV-TRACKING_UPLINK
ip flow monitor FNF-STANDARD-MONITOR input
snmp trap link-status
snmp trap mac-notification change added
snmp trap mac-notification change removed
exit
fi
if [[ $LINKUP == NO ]]
then conf t
default interface $INTERFACE
interface $INTERFACE
source template STANDARD-PORT
device-tracking attach-policy DEV-TRACKING
ip flow monitor FNF-STANDARD-MONITOR input
exit
fi
}
Here is a good example how it looks when it fails completly:
AP´s are connected to the first 12 ports of the switch.
We are already in contact with Cisco TAC.
This issue happens on several IOS Versions we tested in our LAB.
(17.3.4, 17.9.3, 17.12,...)
Best regards,
Steffen
