topic Cisco ISE CLI and GUI password expire in Network Access Control

Cisco ISE CLI and GUI password expire

mostafa.kamel — Mon, 11 Mar 2019 03:36:11 GMT

I had Cisco ISE version 1.1 i face a problem with the CLI and GUI password, as it expire and i can't login, i do the password reset using the ISE DVD,

i navigate to the ISE CLI, and do the following commands:

conf t

password-policy

no password-expiration-enable

and reset the GUI admin password, using the command:

# application reset-passwd ise admin

from the ISE GUI i had remove the option for diable admin account after 45 days.

but after 60 days the password expire again.

so kindly advise what to check for this expire issue.

Cisco ISE CLI and GUI password expire

Jatin Katyal — Mon, 01 Jul 2013 10:49:58 GMT

I come across this issue few days ago. There has been an issue that after the account expires and is re-enabled, and I think we have few options here:

1.] Uncheck the box "Disable user account after X days if password was not changed"

2.] change the default value from 60 days to X days as per your requirement.

3.] Reset the user account password with in 60 days.

~BR
Jatin Katyal

**Do rate helpful posts**

Cisco ISE CLI and GUI password expire

mostafa.kamel — Mon, 01 Jul 2013 10:56:42 GMT

Hi Jatin,

thanks for your reply.

i think your reply is related to the GUI admin password, but have you any idea why the CLI password expire even i disable the expiration from the CLI.

thanks and regards,

Mostafa

Re: Cisco ISE CLI and GUI password expire

Jatin Katyal — Mon, 01 Jul 2013 22:42:49 GMT

Hi Mostafa,

Yes, the last reply was more towards GUI password-mgmt because in maority of cases it happens with UI admin account. I need to know if you've restarted the ISE after disabling the expiration from the CLI because what I read few weeks ago in an internal defect that password policy configurations are not preserved on cli after restart so just to check could you please check the current settings on CLI w/ the help of show run | in password-policy.

~BR
Jatin Katyal

**Do rate helpful posts**

Re: Cisco ISE CLI and GUI password expire

mostafa.kamel — Tue, 02 Jul 2013 11:16:34 GMT

Hi Jatin,

thanks for your reply.

in fact the ISE has been restarted two times due to power shortage.

is there a version for the ISE that has this problem solved for the password policy configurations not preserved on the CLI.

thanks and regards,

Mostafa kamel

Re: Cisco ISE CLI and GUI password expire

Jatin Katyal — Tue, 02 Jul 2013 11:41:57 GMT

The defect also talks about sync issue between UI and CLI. That was the closest one I could find. The defect shows 1.2 will have a fix for it.

~BR
Jatin Katyal

**Do rate helpful posts**

Re: Cisco ISE CLI and GUI password expire

mostafa.kamel — Tue, 02 Jul 2013 12:03:05 GMT

thanks Jatin for your support and reply.

Mostafa kamel

Re: Cisco ISE CLI and GUI password expire

Jatin Katyal — Tue, 02 Jul 2013 12:22:58 GMT

Your welcome:)

~BR
Jatin Katyal

**Do rate helpful posts**

@Jatin Katyal you post

rreichel — Wed, 02 Nov 2016 20:47:54 GMT

jkatyal you post above really helped. Thanks.

Thanks RReichel :)

Jatin Katyal — Wed, 02 Nov 2016 21:26:44 GMT

Thanks RReichel 🙂

Re: Thanks RReichel :)

hunterman — Sun, 24 Mar 2019 09:31:31 GMT

Hello everyone,

I can enter in ise server with GUI by used my username and password and can login as fine, But the CLI ssh i can't enter when i used my username and password, How can enable the account in cli?

Any help

THANKS

Re: Cisco ISE CLI and GUI password expire

yavar.fallahi — Sat, 09 Nov 2019 16:04:36 GMT

Thank you for your solution, it worked! I have been lucky as I had separate SSH account to reset the GUI user.