topic Re: HOSTNAME CHANGE ON ISE 2.3 in Network Access Control

HOSTNAME CHANGE ON ISE 2.3

kajibola — Tue, 21 Nov 2017 15:43:03 GMT

A client requested the hostname on the PSN be changed because of the guest redirect URL which contains the PSN hostname. Unfortunately, the client don't like the URL display name.

Apart form FQDN and Certificate, I want to know if changing hostname on ISE server won't break anything.

Thanks.

Re: HOSTNAME CHANGE ON ISE 2.3

hslai — Tue, 21 Nov 2017 16:55:04 GMT

Have you already tried the Static IP/Host name/FQDN in Common Tasks > Web Redirection?

You may change the hostname after de-registering the PSN from the deployment and re-register it back afterwards. Hostname changes would also impact Active Directory if used. Please leave and re-join.

Re: HOSTNAME CHANGE ON ISE 2.3

kajibola — Tue, 21 Nov 2017 18:30:37 GMT

@hslai,

Do the static FQDN option means that I can put URL of choice there and that is what the PSN will push to guest endpoints (it will no longer be the PSN hostname) which means the static FQDN will also have to be mapped to the PSN IP address.

I will try it out when I get back on site.

Re: HOSTNAME CHANGE ON ISE 2.3

hslai — Tue, 21 Nov 2017 18:45:00 GMT

That is correct. We usually do this for the FQDN of the VIP defined in a load balancer, for example. Of course, this static FQDN needs to be resolvable by the endpoints to IP address and it also needs matched by certificates used for the web portal.

Re: HOSTNAME CHANGE ON ISE 2.3

kajibola — Tue, 21 Nov 2017 19:43:14 GMT

@hslai,

I will test and revert tomorrow.

Thanks.

Re: HOSTNAME CHANGE ON ISE 2.3

kajibola — Fri, 24 Nov 2017 10:36:25 GMT

@hslai,

The static FQDN option worked.

Thanks.

Re: HOSTNAME CHANGE ON ISE 2.3

x00008037 — Thu, 09 May 2019 05:31:00 GMT

How do you maintain persistence on the load balancer when using the vip as redirect ip. As the psn that received the first radius packet needs to be the one that serves the web page