dc auth-history

Synopsis

netapi ise dc auth-history <MAC> [OPTIONS]

Description

Get the complete authentication timeline for a specific MAC address. Shows all authentication attempts (both passed and failed) in chronological order. Essential for troubleshooting intermittent connectivity issues.

Arguments

Argument Description

Argument	Description
`MAC`	MAC address of the endpoint (required)

MAC

MAC address of the endpoint (required)

Options

Option Default Description

Option	Default	Description
`--hours`, `-h`	`48`	Hours to look back
`--limit`, `-l`	`50`	Maximum records to return

--hours, -h

48

Hours to look back

--limit, -l

50

Maximum records to return

Use the global --format flag at the dc level:

netapi ise dc --format json auth-history 3C:EC:EF:43:50:42

Usage

# Default: last 48 hours
netapi ise dc auth-history 3C:EC:EF:43:50:42

# Extended history (1 week)
netapi ise dc auth-history 3C:EC:EF:43:50:42 --hours 168

# More records
netapi ise dc auth-history 3C:EC:EF:43:50:42 --limit 100

# JSON output
netapi ise dc --format json auth-history 3C:EC:EF:43:50:42

Sample Output

Table Output (default)

╭──────────────────────────────────────────────── Auth History ────────────────────────────────────────────────╮
│ 9C:83:06:CE:89:46                                                                                            │
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
┏━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━┳━━━━━━━━┳━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Time                ┃ Status ┃ Method ┃ Policy Set     ┃ AuthZ Profile ┃ NAD        ┃ Failure Reason         ┃
┡━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━╇━━━━━━━━╇━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━┩
│ 2026-01-26 14:50:38 │ FAILED │ mab    │ HomeRF WPA2PSK │ -             │ 10.50.1.40 │ 22056 Subject not      │
│                     │        │        │                │               │            │ found in the appl...   │
└─────────────────────┴────────┴────────┴────────────────┴───────────────┴────────────┴────────────────────────┘

0 passed | 1 failed | 1 total

Successful EAP-TLS Authentication

╭──────────────────────────────────────────────── Auth History ────────────────────────────────────────────────╮
│ 3C:EC:EF:43:50:42                                                                                            │
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
┏━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━┳━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━┓
┃ Time                ┃ Status ┃ Method  ┃ Policy Set               ┃ AuthZ Profile        ┃ NAD        ┃ Fail  ┃
┡━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━╇━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━┩
│ 2026-01-26 10:45:12 │ PASSED │ eap-tls │ Wired Dot1X Closed       │ Domus_Secure_Profile │ 10.50.1.10 │ -     │
│ 2026-01-26 08:15:00 │ PASSED │ eap-tls │ Wired Dot1X Closed       │ Domus_Secure_Profile │ 10.50.1.10 │ -     │
│ 2026-01-25 17:30:45 │ PASSED │ eap-tls │ Wired Dot1X Closed       │ Domus_Secure_Profile │ 10.50.1.10 │ -     │
└─────────────────────┴────────┴─────────┴──────────────────────────┴──────────────────────┴────────────┴───────┘

3 passed | 0 failed | 3 total

Use Cases

Troubleshooting Intermittent Issues

# Look for patterns in failures
netapi ise dc auth-history 3C:EC:EF:43:50:42 --hours 72

Questions to answer:

Are failures clustered at certain times?
Do failures precede successes (retry working)?
Different NAS IPs showing different patterns?

Verify Policy Change Effect

# After changing auth policy, verify it's working
# Look for the new auth profile in recent attempts
netapi ise dc auth-history 3C:EC:EF:43:50:42 --hours 1

Compare Multiple Devices

# Script to check multiple problem devices
for mac in "3C:EC:EF:43:50:42" "14:F6:D8:7B:31:80" "70:15:FB:F8:47:EC"; do
  echo "=== $mac ==="
  netapi ise dc auth-history "$mac" --hours 24 --limit 5
  echo
done

Export for Analysis

# Full history for external analysis
netapi ise dc --format json auth-history 3C:EC:EF:43:50:42 --hours 168 --limit 500 > mac_history.json