Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm attempting to build an iPhone/iPad provisioning WLAN which will only permit select external traffic. Specifically, I need to open TCP 80, TCP 443, UDP 123, and a handful of other ports to Apple's 17.0.0.0/8 network. I have a physical WLC runnin...
I'm testing MAB Profiling on a 3750-X running 15.2(4)E8. I have a Cisco IP Phone connect on Gi1/0/23. I have Device Sensor setup and passing DHCP/CDP/LLDP data to ISE 2.6,p5, where my IP-Phone MAB rule lives. I'm running into a testing issues that...
No luck. I tried removing and then adding back the "device-sensor accounting" without success. Our switches are on code 15.2(4)E8 which was not listed under CSCvk31115.
I think I've partially found the answer here: https://www.ise-support.com/2019/07/02/switch-device-sensors-and-access-reject/#comment-51My CDP details aren't being submitted via accounting. I tried this method, which should be more restrictive than a...
After looking through my Radius Debug, I'm not seeing any CDP or LLDP details in the accounting.Gi1/0/23 AuditSessionID 0A32EC15000000490632DB37001837: Jun 18 15:07:52.565 EDT: RADIUS/ENCODE(00000000):Orig. component type = Invalid001838: Jun 18 15:0...
The "aaa accounting config..." is present and configured for my ise-radius group. I did not have "radius-server vsa send accounting" in my config, but after running a test it had no impact. The device sensor data is showing in cache on the switch, bu...
