dynamic vlan not working 9800+ISE

[itrs97453]

Hi

there was WLC2500+AP1800+ISE working well with dynamic vlan.

Now, we begin to migrate APs to WLC 9800 with local mode. all other is working well, but dynamic vlan.

we have vlan 28 and 29, vlan 28 is configured as default vlan in wlc9800 policy. ISE log showing it assigned correct authorization profiles(vlan29). but client is got IP in vlan 28. if changed default vlan to 29 on policy, it got vlan 29. 

I configured WLC following the url: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html

Any clue about how to troubleshooting this issue ? Thanks.

[marce1000]

 - Have a checkup of the 9800 WLC configuration with the CLI command show tech wireless and feed the output to : Wireless Config Analyzer

   - Further engage in  client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity , these debugs can be analyzed with Wireless Debug Analyzer

  - Outputs from the commands mentioned in https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217738-monitor-catalyst-9800-kpis-key-performa.html#anc5 can also be useful

 - Review controller software version ; go for 17.9.5 , especially if you are currently on an older version , 

 M.

[itrs97453]

current version is 17.9.4a, looks need a upgrade. 

[marce1000]

           - 17.9.4a , is recent enough ; probably not a direct cause , 

 M.