×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Profiling in Identity Services Engine 1.1

Unanswered Question
Apr 19th, 2012
User Badges:

Hi,


anybody who can tell me, how profiling works exactly ???


How intelligent is the profiling engine, meaning:

Will it discover that one device has more than one different MACs and will merge the entries in the database ??


Example:



This is in fact the same device, there is only one WLC-2500 in the network ....


If it can discover that, what needs to be configured on the ISE to do that ??


Rgs


Frank

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Tarik Admani Mon, 04/23/2012 - 20:17
User Badges:
  • Green, 3000 points or more

Frank,


ISE will see these as two different endpoints based on the mac address. If you click on the device in the endpoint database can you see how ISE discovered these two mac addresses? How do you have this WLC connected to your network?


thanks,

Tarik Admani

Frank Lothar Weber Wed, 04/25/2012 - 16:05
User Badges:

Hi, Tarik.


Well, that means that every device, that has more than one mac-address might show up as multiple entries in the profiling database, is that true ??? That would be true for switches, too, each with a different mac in each vlan it might carry ???


Thats not very satisfying, I am thinking about a single switch carrying about a hundred different vlans showing up in the database .......


Is there a way to avoid this ???



The wlc is connected directly to the lab network (one C3560E, one AP 1142N and the ISE)


The 3560 is connected via dot1q trunk to a C4510R-E (to make it reachable for the ISE)


I have attached the screenshots of the two entries in the database ...


Rgs


Frank

Attachment: 

Actions

This Discussion