Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi there,
I'm getting stuck with an ISE deployement and HP H3C 5500 Comware 5 switch. Basically, that's a very simple DOT1X configuration, with just PermitAccess and some device-traffic-class=voice attribute to handle IP Phone authentication.
The...
If your car's engine oil consumption is getting high, will you stop using it ? No, you will fix it.
I cannot say " well if a basic feature is not working, let's not use it ".
This is basic DOT1X and according the compatibility matrix, this should w...
Hi,
No it did not help : I configured everything with a 2 minutes timer, still same behavior.
What I'm seeing in the PCAP and in the logs :
- NAD sends a re-auth access-request
- ISE is challenging the NAD, a state attribute is sent
- NAD is starti...
Alright, what would you advice for the timeouts on the three devices ?
ISE EAP timeout greater than switch timeout greater than endpoint timeout ?
Thanks a lot
Hi,
https://community.cisco.com/t5/identity-services-engine-ise/ise-2-4-patch-4-amp-hp-h3c-comware-5-basic-dot1x/m-p/3761950
I got some troubles to make basic DOT1X with H3C 5500, I advice you to run tests in lab / poc / ...
Cheers
Hi,
What do you mean ? Of course the endpoint is the phone, but the phone never discuss with ISE.
It gets challenged by the switch, and the switch is acting as authenticator, isn't it ?
By the way, I got the same behavior with Windows 7 or Window...
