Hello,
i'm deploying nac configuration (Cisco ise 3.1) and i'm unable to configure the switches IE2000 because they're not accepting the nac commands even if the minimun os requirement is met.
They're running at least ie2000-universalk9-mz.152-3.E3.bin version, following in bold the commands that are refused:
!Global cofiguration
authentication mac-move permit
!
dot1x system-auth-control
dot1x critical eapol
!
!Port configuration
switchport mode access
switchport access vlan 93
switchport voice vlan 18
authentication control-direction in
authentication event fail action next-method
authentication event server dead action authorize vlan 93
authentication event server dead action authorize voice
authentication event server alive action reinitialize
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication timer inactivity server dynamic
mab
dot1x pae authenticator
dot1x timeout quiet-period 300
dot1x timeout tx-period 10
spanning-tree bpduguard enable
spanning-tree portfast edge
no ip device tracking maximum
!
Anybody knows why they're not accepted? Maybe it's a license issue? I have this licence type:
Index 2 Feature: lanlite
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Priority: Medium
License Count: Non-Counted
May i need another license?
In attachment the screenshot with all the license types loaded and in use.
Thank you
