A tablet landed on an unexpected VLAN. The controller shows the VLAN it was given. An engineer needs the authorization rule that returned that VLAN. Which product has the rule?
Select an answer to reveal the explanation.
Short Explanation
The controller can show you the VLAN it was told to use. The rule that chose it lives on ISE. Your spectrum report does not file policy decisions, and a beacon does not list the matched rule.
Full Explanation
ISE is the policy product that evaluates the tablet and returns the authorization result, including the VLAN. Seeing which VLAN was applied is not the same thing as reading the rule that selected it. A spectrum report describes energy. It does not store authorization rules. A site tag binds radio and site profiles to an access point. It does not select an authorization rule at join time. The beacon advertises the WLAN. It does not list the rule ISE matched for one tablet. ISE is the product that recorded the authorization result, and the rule that fired is stored with that session. Check one live client after the change and leave the rest of the floor alone until that client matches the result you expected. Exam caveat: if the VLAN was set on the policy profile and ISE did not override it, ISE will show that no rule changed the VLAN. Read the result before you edit a rule that never ran. Operational check: find the tablet's session in ISE and confirm the matched rule is the one that returned the unexpected VLAN.