Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
FYI...The CSCvx25841 bug for dhcp snooping on 9300 switches is incorrectly identified as being resolved in 17.7.1.This bug is still evident when updating 9300 series switches to 17.7.1.
I performed an upgrade to a c9300-48 running 16.12.3 and noticed that the "ip dhcp snoooping" command was not present after an upgrade to 17.3.4. The "ip dhcp trust" commands are still present. Anyone else notice this?
lighting up a 9500 StackwiseVirtual switch running 16.12.xHave Mgmt-vrf interfaces up and operational when 9500 switches are new. When I create the Stackwise stack the Mgmt int in switch 2 no longer responds. When reloading switch 1 I am unable to...
Seeing an issue on 4000IE switches, and others, with Identity Services Engine authentication setup not learning the mac address of the client. Running 152-4.EA9 on 4k switch with auth config below.Suspect devices not permitted to talk on network un...
Running ISE 2.4 on a variety of switch platforms in open mode. When making the transition to closed mode some devices behave differently for the authentication of devices even though were classifying devices via mab....
When removing the authen open...
Updated 3 - c9300-48P switches from 16.12.3a to 17.3.4 and all 3 were missing "ip dhcp snoop trust" from the uplink port channel group. Definately a "new feature".
Yes, you can simply add the command back in and it works. 17.3.4 is a recommended version to be running on the C9300. Can't believe this was missed. I have to think that this was the expected behavour after some other change. If that is the case ...
Reza, thanks for the response. Yes, that is the behavior I was expecting. Found that removing the gig 0/0 ip address config I had applied prior to stacking and then putting the switch back into the stack resolved.Also noticed the arp entry for the gi...
Mark, the switch port never learns the MAC address and hence no authentication is performed. ISE never gets the request to authenticate the port. If I force switch to learn MAC via alternate methods, ie static assignment, ISE performs as expected...
