A retail chain's stockroom connects wired label printers through MAB, and ISE has just re-profiled the fleet into the printer category. The printers must pick up addresses from the new printer scope, each port serves a single printer, and the link must recover with no technician on site. Which CoA action should ISE send so the printers take on the new profile and refresh their addresses?
Select an answer to reveal the explanation.
Short Explanation
You’ll want ISE to send a port bounce—like briefly unplugging and reconnecting the printer—so it reauthenticates and requests an address from the new scope. Since each port serves just one printer, the reset won’t affect another device, and unlike reauthentication or disconnect alone, it cycles the link to prompt a fresh DHCP request.
Full Explanation
When ISE re-profiles an endpoint, a new authorization must reach the switch, and the endpoint may need to refresh its DHCP configuration. A port bounce cycles the switch port down and up, prompting the printer to reauthenticate and its DHCP client to request an address on the new scope. The exact DHCP exchange and address depend on the client and network configuration. Reauthentication makes the switch rerun MAB and apply the updated policy, but does not itself cycle the link. A Disconnect-Request ends the RADIUS session; it does not itself cycle the interface either. Assigning the printer VLAN can place the session on the new VLAN, but does not by itself ensure an immediate DHCP refresh. A port bounce affects every session on that port, which is acceptable here because each port serves one printer. Verify the session on the switch and the resulting DHCP lease.