09-26-2023 08:33 AM
Earlier this year, we migrated from the WLC 2504 to the Catalyst 9800-CL cloud wireless controller, and we have Cisco ISE as our radius server for authentication. With the old wireless controller, if someone was successfully connected to wifi (after being authorized b ISE), then it would show the endpoint as "Connected". However, ever since we cut over to the new wireless controller, we have found that even when someone is successfully connected to wifi via ISE, the endpoint shows as "Disconnected", and as a result, our license consumption is not accurate. Has anyone else come across this, and are you aware of a configuration that would explain what we are seeing? Thank you.
Solved! Go to Solution.
01-03-2024 04:27 AM
I had the same issue, although using WLC 9800-80 17.9.4 and ISE 3.1. Added the following configuration in WLC:
aaa accounting update newinfo periodic 2880
aaa accounting identity dot1x start-stop group ISE
After which i added the accounting list to the Policy Profile for the WLANs.
01-04-2024 04:03 PM
I have made this change today but have not yet seen a resolution. However, I noticed that you had 2880 set for the ne info periodic section. Therefore, did it take two days for the change to take effect?
01-05-2024 01:24 AM - edited 01-05-2024 01:28 AM
It took change right away after I did a "session reauth" on the endpoint in ISE.
And you added the Accounting List under Advanced tab in Policy Profile?
01-05-2024 06:58 AM
I was missing the accounting list under the advanced section. As soon as I did that, now the connection statuses show! Thank you!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide