topic Re: Problem adding Active Directory on ISE 2.7 in Network Access Control

Problem adding Active Directory on ISE 2.7

INEMINEMINEMINEM — Fri, 21 May 2021 12:09:34 GMT

Hello all,

I have a issue related to add a External Identity Sources on ISE.

When I click on Add nothing happens, I tried this with IE, Edge, Firefox and Chrome, and the behavior is the same.

I tried my luck clicking in the tools buttom and adding from here (Image below):

But anything happens again (image below):

So, what I'm doing wrong? This is a well-known browser issue? or is a ISE 2.7 well-known issue?

And how can I fix this issue, because I'm stuck?

Thanks in advance

INEM

Re: Problem adding Active Directory on ISE 2.7

ilay — Fri, 21 May 2021 15:15:09 GMT

I think you may need to restart ISE in CLI . =_=

I also had page display problems in ISE2.4 before. I couldn’t do nothing except restart. Everything was normal after restart.

Re: Problem adding Active Directory on ISE 2.7

INEMINEMINEMINEM — Fri, 21 May 2021 17:12:32 GMT

It's possible to add the AD from the CLI? Because from the Browser it's impossible. I restart my VM more than 20 times or so.

Re: Problem adding Active Directory on ISE 2.7

ilay — Fri, 21 May 2021 23:18:12 GMT

it’s not possible, at least for now.

Cisco ISE runs on the Cisco Application Deployment Engine operating system (ADEOS), which is based on Red Hat Enterprise Linux (RHEL)，Most of the operations need to be implemented through WEBUI.

CLI only contains some commands for system check or management, like this：↓

isea/admin# application ?
  configure     Configure application
  install       Install An Application Bundle
  remove        Uninstall An Application
  reset-config  Reset application configuration to factory defaults
  reset-passwd  Reset application password for specified user
  start         Start an Application
  stop          Stop an Application
  upgrade       Upgrade An Application Bundle

isea/admin# application config ise

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[11]Enable/Disable ACS Migration
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[17]Enable/Disable Wifi Setup
[18]Reset Config Wifi Setup
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[25]CleanUp ESR 5921 IOS Crash Info Files
[0]Exit

0
isea/admin#

Add AD can only be through WEBUI, it is better to schedule a restart

Re: Problem adding Active Directory on ISE 2.7

Marcelo Morais — Sat, 22 May 2021 03:50:36 GMT

Hi @INEMINEMINEMINEM ,

please ... at Administration > Identity Management > External Identity Sources, select Active Directory, select the Cogwheel and click the Create Active Directory Instance:

Hope this helps !!!

Re: Problem adding Active Directory on ISE 2.7

INEMINEMINEMINEM — Sat, 22 May 2021 23:03:50 GMT

Hi,

I already tried this option, I forget to mention, but the issue is that when I click Submit it's suppose that a new windows to put Administrator credentials show up, but nothing happens, I tried several times, I don't understand what happens....

Any idea to solve this issue?

Thanks in advance

INEM

Re: Problem adding Active Directory on ISE 2.7

Nadia Bbz — Sun, 23 May 2021 10:07:49 GMT

Hi ;

Did you try with Waterfox , when you type show application status ise , is all necessary process running

also did you try to stop ise and restart application stop ise and application start ise

Re: Problem adding Active Directory on ISE 2.7

INEMINEMINEMINEM — Sun, 23 May 2021 15:55:14 GMT

Hi Nadia,

I follow your suggestion, but not work:

Also see the show application status ise:

Any idea to solve the error?

Error: Unable to load ActiveDirectoryPrInputAction.do?command=goToCreateInstance&ADClusterToEdit=Default_Scope status:400

Thanks in advance

INEM

Re: Problem adding Active Directory on ISE 2.7

Nadia Bbz — Mon, 24 May 2021 09:25:19 GMT

Hi ;

Hi , try with version ise 3.0 is more stable and is recommendation version by cisco

Re: Problem adding Active Directory on ISE 2.7

lrojaslo — Mon, 24 May 2021 19:34:17 GMT

Confirm if you are using any AD Block extension in your browser (if you do, then disable it), it is well known behavior for AD GUI options won't show up if you have this.

Re: Problem adding Active Directory on ISE 2.7

Ping Zhou — Mon, 24 May 2021 19:52:34 GMT

What patch level is with this ISE 2.7? I couldn't really tell... But just an FYI... We just brought up ISE 2.7 last week and installed patch 3. We didn't experience this problem while working on AD Join for the nodes.

Re: Problem adding Active Directory on ISE 2.7

lrojaslo — Mon, 24 May 2021 20:54:26 GMT

I found this related defect CSCvw37496 that could be potentially affecting your ISE, however at this point it is better to report the issue with TAC.

Re: Problem adding Active Directory on ISE 2.7

HW05194 — Wed, 19 Apr 2023 21:56:28 GMT

Thank you!

Re: Problem adding Active Directory on ISE 2.7

Syamkumar — Mon, 18 Mar 2024 07:29:12 GMT

I am facing the same issue on ISE 3.2 patch 5.

Anyone found the solutions to it? I have tried with several browsers. Still unable to pop up the Add Button from AD ISE.