topic Problem to get Web admin access on cisco ISE in Network Access Control

Problem to get Web admin access on cisco ISE

hugomejias — Mon, 11 Mar 2019 03:34:10 GMT

Hi,

We are currently having problems to access via Web admin UI to cisco ISE. after we put the password, we get this message on screen:

authentication failed due to zero RBAC group.

The ISE version that we are using is: 1.1.2.145 path 3

Do you have any idea about that?

Thank you for your attention on this matter.

Regards.

Problem to get Web admin access on cisco ISE

Marcin Latosiewicz — Thu, 20 Jun 2013 13:49:46 GMT

Hugo,

Serveral known issues exist that result in this message. Can I suggest to open a TAC case?

Or go to 1.1.3 patch 1 and re-test.

Problem to get Web admin access on cisco ISE

Jatin Katyal — Thu, 20 Jun 2013 13:56:17 GMT

Looking at the screen shot it seems that you've not configured ISE to use external account from Active Directory. In most of the cases either we need to run the script to fix it temporarily or we need to reimage. I agree with Marcin that this issue calls for TAC case. However, before that if you wish

1.] You can upgrade to ISE 1.1.3 latest patch.

2.] Try to eset the internal admin account to gain GUI access if you have CLI access.

Run 'application reset-passwd ise admin' >> Follow the prompts

Jatin Katyal
- Do rate helpful posts -

Problem to get Web admin access on cisco ISE

hugomejias — Thu, 20 Jun 2013 14:03:21 GMT

Can I upgrade from 1.1.2 version to 1.1.3 version or 1.1.4 version without lose my actual configuration.?

Problem to get Web admin access on cisco ISE

Jatin Katyal — Thu, 20 Jun 2013 14:07:42 GMT

Yes, you can. However, it's a good practise to take backup before you upgrade to next version.

Jatin Katyal
- Do rate helpful posts -

Problem to get Web admin access on cisco ISE

hugomejias — Thu, 20 Jun 2013 14:08:00 GMT

Can I upgrade from 1.1.2 version to 1.1.3 version or 1.1.4 version without lose my actual configuration.?

Problem to get Web admin access on cisco ISE

hugomejias — Thu, 20 Jun 2013 20:49:16 GMT

Hi Jatin,

Unfortunately I can't do the upgrade, when I try to upgrade from 1.1.2 to 1.1.3 I get this error:

% ERROR: This node is part of an ISE deployment. Please make it a standalone first, then retry upgrade.

error: %post(CSCOcpm-upgrade-1.1.3-124.i386) scriptlet failed, exit status 1

% Application upgrade failed. Please check logs for more details or contact Cisco Technical Assistance Center for support.

I think to install 1.1.4. may solve many issues.

Problem to get Web admin access on cisco ISE

myanznki — Mon, 24 Jun 2013 07:11:13 GMT

it's look like you have more than 1 ise that act as primary/secondary, so you must make it standalone before you upgrade it...

Problem to get Web admin access on cisco ISE

kyle.rose — Mon, 24 Jun 2013 13:58:34 GMT

You can't log into the CLI, it doesn't accept the password. What else can resolve this?

Problem to get Web admin access on cisco ISE

kyle.rose — Mon, 24 Jun 2013 13:59:05 GMT

How long does this issue last?

Problem to get Web admin access on cisco ISE

claudiogordon — Thu, 27 Jun 2013 18:17:46 GMT

I'm with the same problem and ISE is already at 1.1.3.124 version

Someone knows the solution?

Regards,

Claudio

Problem to get Web admin access on cisco ISE

Ravi Singh — Sun, 30 Jun 2013 08:41:46 GMT

In Cisco ISE, RBAC policies are simple access control policies that use RBAC concepts to manage admin access. These RBAC policies are formulated to grant permissions to a set of administrators that belong to one or more admin group(s) that restrict or enable access to perform various administrative functions using the user interface menus and admin group data elements. I think there is problem with your RBAC policy configuration. Please follow the below link for help.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html#wp1282656

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html#wp1283009

Problem to get Web admin access on cisco ISE

harvisin — Mon, 01 Jul 2013 11:07:12 GMT

Hello,

I went through your query and found the following link which might help you :-

http://www.cisco.com/en/US/docs/security/ise/1.0.4/user_guide/ise10_man_identities.pdf

Problem to get Web admin access on cisco ISE

claudiogordon — Mon, 01 Jul 2013 12:57:00 GMT

Hello guys,

Thanks for helping but, I can't access the web interface, how could I change the RBAC configurations?

Regards,

Claudio

Problem to get Web admin access on cisco ISE

kyle.rose — Mon, 01 Jul 2013 13:08:20 GMT

a reboot resolved this issue for me

Problem to get Web admin access on cisco ISE

claudiogordon — Mon, 01 Jul 2013 13:51:27 GMT

I already tried to reboot but didn't resolve

Problem to get Web admin access on cisco ISE

RSundstrom — Tue, 30 Jul 2013 18:37:11 GMT

Claudio,

I had the same problem recently. I restarted the applications from the CLI. Here is the command sequence...

#Show application status ISE (to view existing applications status, mine showed no connection to database)

#Application stop ISE (shuts down ISE applications)

#Application Start ISE (Restarts ISE applications)

#Show application status ISE (restarts ISE applications)

Expect ISE to take about 10 minutes to restart all services. Then you should have access to the web interface. It will take another 10-15 minutes for the dashboard to completely update.

FYI. We are at 1.1.4 with all patches in place as of this date.

Bob

Problem to get Web admin access on cisco ISE

claudiogordon — Tue, 30 Jul 2013 19:00:12 GMT

Hello Robert,

Thanks for helping! I tried it and didn't work, but, I already solved the problem... I opened a TAC and the engineer told me to reset the configurations and restore a backup...

Regards,

Claudio

Problem to get Web admin access on cisco ISE

Ravi Singh — Thu, 01 Aug 2013 03:22:12 GMT

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html#wp1282656

click on the above link and go to Configuring RBAC Permissions .