06-04-2018 04:56 PM
Hi Team,
Customer running ISE2.4 with traditional base and plus license. Polices are configured for MAB and dot1x. Profiling also enabled and devices are getting profiled. It's an upgrade from 2.2.
Policies have EAP-TLS, PEAP , AD groups and Endpoint identity group (Static not dynamic) related conditions.
Clients are getting profiled but there are no plus license related attributes in the authz policy.
Checked report for active sessions and found that base and plus license consumed for dot1x authenticated machines with license details "Plus license consumption because of Group type PROF ".
Need to understand if the client getting profiled and authenticated. Is it suppose to use both license or only base.
Customer claimed this to be base only if there are no attributes for plus in the policy.
Prior to upgrade there was no plus consumption.
Any assistance would be appreciated.
Regards
Gagan
Solved! Go to Solution.
06-04-2018 05:06 PM
For what it's worth, I think you're hitting this
06-04-2018 05:06 PM
For what it's worth, I think you're hitting this
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide