NAC AAA rule assentment .

[Frank11]

NAC 6.3.0.168, Wireless V2110 9.21.09.0004
I have a strange issue with devices not using the right AAA rule in the NAC even though when checking the device via the NAC evaluation tool tells me it should be using the right rule.

The NAC is setup for proxy Radius to a windows NPS server. When I run the NAC evaluation tool I get the correct information below with the correct rule "BYOD-test" passed.

BUT looking at the NAC end-systems data for that device it goes to the end "catch-all" rule, not the rule the evaluation tool displays.

Any idea's where to look or are there other tools I can use for testing?

[Zdeněk_Pala]

Https:/:nac-gw:8444 there you should have diagnostics tools and log. The username and password is configured in your nacmanager

[Jeremy_Gibbs]

What are the rule requirements for BYOD?? Show us your rules.

[Frank11]

Here are the rules.

The SMC-Staff NAC rule and SMC-Student NAC rule work perfectly going to the same windows NPS.

I will try to find other logs and where to increase the verbosity level. Not sure where these are yet.

[Zdeněk_Pala]

Is your rule comdition(s) based on MAC address? The changing of endsystem group (adding MAC to the group) does not require enforce, but can take some time to propagate from Netsigh (management) to the gateway (engine). I met also situation when this updates never happened and Netsighr reboot was necessary to fix the issue. Regarding debugging have you tried increase the verbocity level and check logs?