Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Cisco NAC Agent pop up

Hi,

We are running Cisco ISE 1.2 with patch 6 and NAC Agent 4.9.0.1013.

The Switch where the IP Phones  --> connected to PC is 4506E with latest Update, 03.05.02   15.2 E2.

The NAC Agent pop up is Intermittent. The first time it does not pop up and gets stuck in Posture Remediation on the Switch.

The Redirection is also Intermittent.

 

When we unplug the cable and bounce the switch port the NAC Agent pops up once.

When we restart the PC, the NAC Agent won't pop up again.

The Discovery Host is set on ISE but the same Discovery Host cannot be seen on the Cisco NAC Agent Properties dialog box.

 

The same Cisco NAC Agent works fine with other Switches

 

Any suggestions are highly welcome.

 

Ram kumar

 

 

1 REPLY
Cisco Employee

Hello Ram,For L2 or L3

Hello Ram,

For L2 or L3 deployments, the Agent will pop up on the client if "Popup Login Window" is enabled on the Agent and the Agent detects it is behind the Clean Access Server. If the Agent does not pop up, this indicates it cannot reach the CAS.

To Troubleshoot L2 Deployments:

1. Make sure the client machine can get a correct IP address. Open a command tool (Start > Run > cmd) and type ipfconfig or ipconfig /all to check the client IP address information.

2. If necessary, type ipconfig /release, then ipconfig /renew to reset the DHCP lease for the client.

To Troubleshoot L3 Deployments:

1. Check whether the Discovery Host field is set to the IP address of the CAM itself under Device Management > Clean Access > Clean Access Agent > Installation | Discovery Host. This field must be the address of a device on the trusted side and cannot be the address of the CAS.

2. Uninstall the Agent from the client machine.

3. Change the Discovery Host field to the IP address of the CAM and click Update.

4. Reboot the CAS.

5. Re-download and re-install the Agent on the client.

For more information, please go through the following link:

http://www.cisco.com/c/en/us/td/docs/security/nac/appliance/configuration_guide/49/cam/49cam-book/m_report.html#wp1548499

 

660
Views
0
Helpful
1
Replies