dc misconfigured-nas

Synopsis

netapi ise dc misconfigured-nas [OPTIONS]

Description

Get misconfigured network devices (NAS). Find switches, WLCs, and other network devices with RADIUS configuration issues.

Options

Option Default Description

--hours, -h

24

Hours to look back

--limit, -l

50

Maximum records to return

Usage

# Last 24 hours (default)
netapi ise dc misconfigured-nas

# Last week
netapi ise dc misconfigured-nas --hours 168

# More results
netapi ise dc misconfigured-nas --limit 100

Sample Output

Misconfigured NAS (last 24h)
──────────────────────────────────────────────────────────────────────────────
Time                 NAS IP        MAC                Failed  Issue
──────────────────────────────────────────────────────────────────────────────
2026-01-23 10:43:21  10.50.1.15    3C:EC:EF:43:50:42  15      Shared secret mismatch
2026-01-23 10:41:08  10.50.1.16    -                  8       Unknown NAS - not in network devices

Common Issues

Issue Resolution

Shared secret mismatch

Verify RADIUS shared secret on switch matches ISE network device config

Unknown NAS

Add the device to ISE: Administration > Network Resources > Network Devices

Missing attributes

Enable required RADIUS attributes on the NAS (e.g., Framed-IP-Address)

Use Cases

Weekly Infrastructure Audit

# Check for misconfigs
netapi ise dc misconfigured-nas --hours 168

New Deployment Validation

# After adding switches, verify no issues
netapi ise dc misconfigured-nas --hours 24

See Also