Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello people,I am rolling out several dACLs via ISE on the network.So far, everything has worked wonderfully. Here and there, of course, an ACE is missing, but that could always be analyzed and fixed in a short time.But now I have a behavior with Ige...
Hello dear community,once again I have a small cosmetic problem and can't find a solution. But maybe it is simply not feasible.In our environment, several administrators are responsible for one site each. In our old NAC solution, we had an email aler...
Hi Community,we see partial endpoints that do not contain IP information in the ISE.If we check the endpoint information on the switch withshow auth session int gig3/0/3 detail,the IP information is displayed. Unfortunately we have some profiling pol...
Hello dear community,I noticed something strange on our WLAN controllers today. I had a WLAN controller that had a separate site tag for almost every access point, even though all access points are on the same floor.The WLAN controller (C9800-CL) and...
Hello Community,We are in the process of switching from Extreme Networks NAC solution to Cisco ISE.Most of the switches are also replaced with Cisco 9300 switch.Nevertheless, about 100 Summit X440-G2 switches still need to run for a few years and aut...
Hi annahend,yes currently this only occurs with the Igel thinclients.I assume that with fat clients (windows) the AD Sites and Services take effect and the fat client always communicates with its logon server.BR Stefan
Hi Arne,yes, you're right, I expressed myself incorrectly. I meant that the ACL is applied by the client towards the network, which corresponds to the command ip access-group XXX in if you would configure it statically on the interface.I am a bit fur...
Hello Asimitch,if I set port bounce globally in the profiler, this would then also be applied to the Cisco switches, right?This would cause our IP phones on the Cisco switches to reboot.Here it would be great if the CoA action could be bound to a net...
@Rob Ingram device-tracking and dhcp snooping is configured. I read your linked documentation and the only thing which is missing is the device-sensor configuration. We don´t have the filter lists active and some commands are not available. @hslai i´...
Hi Willthe bug report describes exactly our problem. And now it explains why we don't have it anymore. In the meantime we have updated the DNAC to 2.3.35.But in this version I also saw that it created a new site tag after about 70. However, from then...
