Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello all, We are in the design phase, and as a MAN, we are listed as a Large Site design. We have several locations that currently have C9200Ls as our access layer devices, and most of these are stacked for a single virtual switch. The deployment is...
Hello all, I hope you can help with this issue. I am seeing an issue with several endpoints and NADs, where the endpoint status in ISE doesn't match the endpoint status on the NAD. Here's the status of a Windows endpoint that hangs off a 7945G from t...
Hello all,I have a situation that I feel like needs another set of eyes. Installed ISE 2.4 last week, and had our test 7945G being profiled by the default IP Phone authorization rule, as we would expect, and "Permit Access". After configuring 802.1x ...
Hello all,
I am hoping someone else has seen this issue, and can provide some insight. We performed the above mentioned upgrade and have since lost icmp traffic from our DMZ to the outside. All icmp traffic passes fine from the inside->outside, or...
Hello all,
I have a script (attached) that gives the caller the option of being redirected to an external number. The problem is, when a caller chooses the option to be transferred to the external number UCCX and CUCM seem to hold onto the original...
Steve, That's good to hear. I was getting a little confused as to the wording on this pdf, when all the other deployment guides listed stacking as acceptable.
Thanks for the reply. Yes, the port shows as MAB instead of Dot1x, and the username has changed to the MAC of the workstation. Interface: GigabitEthernet1/0/27IIF-ID: 0x1347829AMAC Address: 6400.6a87.1775IPv6 Address: UnknownIPv4 Address: 10.2.34.20...
This issue is resolved. Appears that port-security is not compatible with ISE. Once we stripped the port-security commands from the ports the phones authenticated fine.
As Surendra pointed out, the profiling process is happening. The issue now appears to be that the 7945G models get profiled as "Cisco-Device" instead of "Cisco_IP_Phone". In comparison, the few 8800 models that we have get profiled correctly.
