topic Re: Port open in ISE in Network Access Control

Port open in ISE

prathapss — Tue, 10 Aug 2021 17:49:31 GMT

As per the document to configure SNMP traps, port 161 should be open in ISE.

When checked with show ports | in 161, there were no output for the admin node.

How to open this 161 port for SNMP configuration?

Re: Port open in ISE

Amine ZAKARIA — Tue, 10 Aug 2021 18:18:49 GMT

Hello,

If you mean ISE send SNMP-traps, then from cli execute "snmp-server enable" the port will be open.

Hope that helps.

Re: Port open in ISE

prathapss — Tue, 10 Aug 2021 18:25:22 GMT

Hi,

The "snmp-server enable" configuration is already there.

Still the port is not opened.

Re: Port open in ISE

Amine ZAKARIA — Tue, 10 Aug 2021 18:50:23 GMT

Hello,

What version of ISE you have ?
Did you try to use NMAP to test if that port closed ? (even if it's not shown)

Just tested it on ISE 2.7 P4

use
no snmp-server enable
snmp-server enable
and do sh logg sys ade/ADE.log | last 30 what does log show ?

Re: Port open in ISE

Marcelo Morais — Tue, 10 Aug 2021 23:31:23 GMT

Hi @prathapss ,

please try the following:

ise/admin# sh ports | include 161

ise/admin# show udi
SPID: ISE-VM-K9 
VPID: V01
Serial: <ISE Serial Number>
ise/admin# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
ise/admin(config)# snmp-server engineid <ISE Serial Number>
% Warning: As a result of engineID change, all SNMP users will need to be recreated.
ise/admin(config)# end
ise/admin# show ports | include 161
udp: 0.0.0.0:161

Hope this helps !!!