Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm attempting to build an iPhone/iPad provisioning WLAN which will only permit select external traffic. Specifically, I need to open TCP 80, TCP 443, UDP 123, and a handful of other ports to Apple's 17.0.0.0/8 network. I have a physical WLC runnin...
I am working on defining various 802.1X/MAB switchport configs and am curious to know how others are handling FlexConnect AP's and the Radius Server Dead Action. I've read through the Cisco documentation here, but it doesn't comment on how to handle...
I'm testing MAB Profiling on a 3750-X running 15.2(4)E8. I have a Cisco IP Phone connect on Gi1/0/23. I have Device Sensor setup and passing DHCP/CDP/LLDP data to ISE 2.6,p5, where my IP-Phone MAB rule lives. I'm running into a testing issues that...
No luck. I tried removing and then adding back the "device-sensor accounting" without success. Our switches are on code 15.2(4)E8 which was not listed under CSCvk31115.
I think I've partially found the answer here: https://www.ise-support.com/2019/07/02/switch-device-sensors-and-access-reject/#comment-51My CDP details aren't being submitted via accounting. I tried this method, which should be more restrictive than a...
After looking through my Radius Debug, I'm not seeing any CDP or LLDP details in the accounting.Gi1/0/23 AuditSessionID 0A32EC15000000490632DB37001837: Jun 18 15:07:52.565 EDT: RADIUS/ENCODE(00000000):Orig. component type = Invalid001838: Jun 18 15:0...
The "aaa accounting config..." is present and configured for my ise-radius group. I did not have "radius-server vsa send accounting" in my config, but after running a test it had no impact. The device sensor data is showing in cache on the switch, bu...
