Cisco ISE BYOD - Unknown Android Device

[JRGC]

I have two Cisco WLC and one  ISE. I created authorization policies for connection of android devices. Devices are recognized without problems in WLC 4400 but in WLC 5508 does not recognize some devices and showing the device is ¨unknown¨.

The same Android device plugs into a WLC (4400) with no problem but on the other (5508) shows ¨unknown¨ device. I am using the same policy for both. The device used for testing is a Samsung S5

Cisco WLC 4402 Firmware 7.0.240.0
Cisco WLC 5508 Firmware 7.6.130.0
Cisco ISE 1.2.0.899

I appreciate your support

Best Regards

[Rasika Nayanajith]

Under 5508 WLAN configuration have you enable Radius client profiling ? If not try that & see

HTH

Rasika

**** Pls rate all useful responses ***

[JRGC]

I have tested it by enabling the profiling radius did not work. Adding another condition Samsung phone  worked me in 5508 without affecting WLC 4402..

I will continue testing.

[Dhiresh Yadav]

Hi,

You mean showing as "Unknown" on the ISE ? Correct.

I hope all the required BYOD configuration is in place. On the advanced tab , NAC state is Radius and in the 5508 wlc , ISE is added as an Accounting server as well.

If that is done and still facing issue , Collect the logs from ISE , Administration > Logging. You can take Profiler logs to see what is happening with that mac-address. Additionally you can set the logs level as debug also if needed under very low load period.

Alternatively , to check if the WLC is really sending Accounting packets with the required information , take TCP Dump from the ISE and filter it via WLC ip address to see what accounting information it sent.

Regards

Dhiresh

**Please rate all helpful posts**