topic Re: Adding Network Devices to ISE? in Network Access Control

Adding Network Devices to ISE?

nwc.navy.mil — Mon, 11 Mar 2019 03:03:54 GMT

The documents on this seem unclear.

I am working on a new deployment of ISE and am having difficulties adding the network devices to it.

When I add the first device I have no issues, using the devices ip address (not loopback) and a mask of 192.

When I try to add a second device using its ip address (again not a loopback) and the network mask of 192, I get an error message indicating "given ip subnet overlaps with the exisitng network: device A (example).

My question is this what mask am I suppose to use for the devices I am trying to add to ISE if I do not have loopback addresses?

Re: Adding Network Devices to ISE?

edondurguti — Wed, 06 Feb 2013 17:33:02 GMT

Hi,

If you want to add a single device eventhough it is not a loop back just use /32.

You're right, they don't mention anything on the documentatioin.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html#wp1053234

They do however say look at this document:

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html#wp1058492

–You can define a specific IP address, or a range with a subnet mask.

–You cannot define two devices with the same specific IP addresses.

–You cannot define two devices with the same IP range. The IP ranges must not overlap either partially or completely.

Adding Network Devices to ISE?

nwc.navy.mil — Wed, 06 Feb 2013 18:24:41 GMT

Thanks for the clarification and links.

Adding Network Devices to ISE?

edondurguti — Wed, 06 Feb 2013 18:26:10 GMT

No problem, please rate helpful posts, thanks.

Hi all

bekcisco1 — Thu, 02 Jun 2016 06:25:21 GMT

Hi all

I have this problem too. So am i supposed to use 32 subnet even though the real ip add for the device is under 24 subnet??????