Hi Guys,   Is there any way to monitor when Access Point using Prime Infrastructure? I want to monitor if the AP goes down or one of the radio is not operational.   My Prime Infrastructure version is 3.3 and my WLC version is 8.5.140. I already set SNMP on WLC, SMTP on PI, and AP monitored on PI. But when it goes down, nothing sent via email.   Maybe I'm looking at the wrong page. Any advise?   Thanks. ... View more

Hi Guys,   It's been an issue for some time and finally Cisco launched a bug page for this. Is there any information regarding this? When will it be patched? Or solution? Since half of my production environment are iPhones.   Thank you. ... View more

Hi Guys,   I often generate reports from PI and so far got no problem exporting the report until yesterday. I wanted to generate Rogue AP report. The path is Reports > Reports > Report Launch Pad > Security > Rogue APs(Updated). When I clicked Save and Export, PI usually takes some time to generate the report and then the file will be available to download. But somehow, for my scenario, it did not work. Even though when i clicked Run only, there were some data.   So I checked into the disk by running "dir disk: recursive" and found the file on the disk. Directory of disk:/ftp/reportsOnDemand/RogueAPsUpdated 43051 Feb 14 2019 16:07:43 Rogue_AP_20190214_160743_011.csv 45116 Feb 14 2019 16:10:19 Rogue_AP_20190214_161019_689.csv   Is this some kind of bug? Well, it's kind of annoying when you have to transfer the file using FTP when it is usually not. Any suggestion?   Thanks. ... View more

Hi Guys,   Is "authentication periodic" command a prerequisite for dot1x authentication?   We are currently testing dot1x authentication for LAN. The laptops and desktops are authenticated using dot1x, while IP phones and other devices are authenticated using MAB. In the process, we found out that some of the desktops whose connection are sourced from IP phone got unauthorized, even though at the beginning those desktops got authorized.   When I see the logs in ISE, somehow the desktop just would not use dot1x as authentication method. It keeps using MAB as authentication method. The notification on the user's workstation is "authentication failed". I tried to remove the "authentication periodic" command and restart the port but it won't go away. Somehow unplug and plug the cable back to the desktop works. I do not know what is the difference here.   Below is my configuration GLOBAL CONFIG aaa group server radius ISE server name ISE1 server name ISE2 aaa authentication dot1x default group ISE aaa authorization network default group ISE aaa accounting update newinfo periodic 2880 aaa server radius dynamic-author client ISE1_IP server-key mykey client ISE2_IP server-key mykey device-tracking policy TRACKING no protocol udp tracking enable dot1x system-auth-control dot1x critical eapol ip access-list extended ACL-DEFAULT permit udp any any eq domain permit udp any eq bootpc any eq bootps deny ip any any radius-server attribute 6 on-for-login-auth radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include radius-server dead-criteria time 10 tries 3   INTERFACE CONFIG interface Te2/0/19 switchport access vlan User switchport mode access switchport voice vlan Telephony switchport port-security maximum 2 switchport port-security violation restrict switchport port-security aging time 1 switchport port-security device-tracking attach-policy TRACKING ip access-group ACL-DEFAULT in authentication control-direction in authentication event fail action next-method authentication event server dead action reinitialize vlan User authentication event server dead action authorize voice authentication event server alive action reinitialize authentication host-mode multi-auth authentication open authentication port-control auto authentication violation restrict authentication periodic mab dot1x pae authenticator dot1x timeout tx-period 10 spanning-tree portfast spanning-tree bpduguard enable spanning-tree guard root end   Below is the example of the log Jan 22 14:40:11.024 XYZ: %SESSION_MGR-5-FAIL:Switch 1 R0/0: smd: Authorization failed or unapplied for client (Desktop_MAC) on Interface TenGigabitEthernet2/0/19 AuditSessionID 0A98200600001658747533E7   Any idea what's going on?   Thank you. ... View more