Profiling in Identity Services Engine 1.1

Frank Lothar Weber · ‎04-19-2012

Hi,

anybody who can tell me, how profiling works exactly ???

How intelligent is the profiling engine, meaning:

Will it discover that one device has more than one different MACs and will merge the entries in the database ??

Example:

This is in fact the same device, there is only one WLC-2500 in the network ....

If it can discover that, what needs to be configured on the ISE to do that ??

Rgs

Frank

Tarik Admani · ‎04-23-2012

Frank,

ISE will see these as two different endpoints based on the mac address. If you click on the device in the endpoint database can you see how ISE discovered these two mac addresses? How do you have this WLC connected to your network?

thanks,

Tarik Admani

Frank Lothar Weber · ‎04-25-2012

Hi, Tarik.

Well, that means that every device, that has more than one mac-address might show up as multiple entries in the profiling database, is that true ??? That would be true for switches, too, each with a different mac in each vlan it might carry ???

Thats not very satisfying, I am thinking about a single switch carrying about a hundred different vlans showing up in the database .......

Is there a way to avoid this ???

The wlc is connected directly to the lab network (one C3560E, one AP 1142N and the ISE)

The 3560 is connected via dot1q trunk to a C4510R-E (to make it reachable for the ISE)

I have attached the screenshots of the two entries in the database ...

Rgs

Frank