Got it

Is it possible to see endpoint profile in Cisco ISE 2.7 with Huawei AC?

Created: Mar 2, 2021 09:58:58Latest reply: Nov 5, 2021 11:45:58 569 8 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

we install Cisco ise for use AAA function 

When we configure AC integrated with it Cisco ISE don't show endpoint profile.How to configure AC to show it ?

Featured Answers

Best answer

Recommended answer

DDSN
Admin Created Mar 3, 2021 07:30:26

Hi WATTA,
Do you want to view user online information on the AC? If yes, you can run the display aaa command to view user online information.
You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_CLIREF_0176366656&lang=en
View more
  • x
  • convention:

All Answers
Hello, dear.
It's nice to meet you in the community.
We're working on getting the right answer for you. Please rest assured that we'll be back with an answer shortly.

View more
  • x
  • convention:

DDSN
DDSN Admin Created Mar 2, 2021 14:58:07

Hi WATTA,
Is the terminal configuration file not displayed on the AC or Cisco ISE?

View more
  • x
  • convention:

WATTA
WATTA Created Mar 3, 2021 02:18:41 (0) (0)
Hi DDSN

The endpoint profile didn't display in Authenication detail on ISE when user connect wifi  
HI Watta,

How are you?

What exact type of Huawei AC are you using and... could you share what you see on Cisco ISE? Is it trying to send RADIUS auth request?

Could you please share more information?
View more
  • x
  • convention:

Posted by ahXing at 2021-03-02 19:50 HI Watta,How are you?What exact type of Huawei AC are you using and... could you share what you see ...
Hi ahXing

We use AC6005-8 software version V200R007C20SP300

The information on ise please see as below

Overview
Event 5200 Authentication succeeded
Username anuwat.na
Endpoint Id 08:D2:3E:C9:AF:40
Endpoint Profile
Authentication Policy CJD_WIFI_POLICY >> AUTHEN_01
Authorization Policy CJD_WIFI_POLICY >> AUTHORIZED_01
Authorization Result CJD_DOMAIN_USERS_PROFILE
View more
  • x
  • convention:

ahXing
ahXing Created Mar 3, 2021 16:50:28 (0) (0)
Ah... I see... so, if I understand your question properly: the output shows "Endpoint Profile" is just that - (it is empty) and your desire is to see how Cisco ISE has classified it back? (I.e. "using profiling function") - is that correct?

Would you have expected something back like 'Intel corporation device' or something? (Because of MAC address)

I am wondering... what is the method of profiling you have selected (on ISE). Is 'Radius probe' enabled? (on ISE)  
DDSN
DDSN Admin Created Mar 3, 2021 07:30:26

Hi WATTA,
Do you want to view user online information on the AC? If yes, you can run the display aaa command to view user online information.
You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100169994&id=EN-US_CLIREF_0176366656&lang=en
View more
  • x
  • convention:

Good answers
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.