dc misconfigured-supplicants

Synopsis

netapi ise dc misconfigured-supplicants [OPTIONS]

Description

Get misconfigured supplicants (endpoints with 802.1X issues). Find endpoints with EAP or supplicant configuration problems.

Options

Option Default Description

--hours, -h

24

Hours to look back

--limit, -l

50

Maximum records to return

Usage

# Last 24 hours (default)
netapi ise dc misconfigured-supplicants

# Last week
netapi ise dc misconfigured-supplicants --hours 168

# More results
netapi ise dc misconfigured-supplicants --limit 100

Sample Output

Misconfigured Supplicants (last 24h)
──────────────────────────────────────────────────────────────────────────────
Time                 MAC                User         NAS IP       Method    Protocol    Reason
──────────────────────────────────────────────────────────────────────────────
2026-01-23 10:43:21  3C:EC:EF:43:50:42  jsmith       10.50.1.10   dot1x     EAP-TLS     Certificate expired
2026-01-23 10:41:08  70:15:FB:F8:47:EC  contractor   10.50.1.10   dot1x     PEAP        Wrong credentials

Common Issues

Issue Resolution

Certificate expired

Renew the client certificate

Wrong credentials

Verify username/password in supplicant config

EAP method mismatch

Ensure supplicant EAP method matches ISE allowed protocols

No EAP response

Check supplicant is enabled and configured for 802.1X

Use Cases

Help Desk Triage

# Find failing endpoints
netapi ise dc misconfigured-supplicants --hours 24

Post-Deployment Validation

# After rolling out new certs
netapi ise dc misconfigured-supplicants --hours 48

See Also