topic Re: ISE passiveID with same 802.1x AD join point in Network Access Control

ISE passiveID with same 802.1x AD join point

eugeniodesideri — Wed, 06 Apr 2022 14:35:58 GMT

hi y'all ,

i have a cisco ise 2.7 distributed deployment 2pan+2psn:

i want to add passiveID function in order to share metadata (user mapping tru PXGRID )

When i am going trough the wizard , i am not able to add in passiveID tab my Active Directory join point , cause it's already in use by 802.1x identity source.

If i try to go trough manual configuration ( external id source ----> select my ad join point ---> ADD DC ) the fetching

of the DCs keeps failing .

Cannot find nothing about this issue on the guide.

Somebody saw faced the same issue ?

thanks

Eugenio

Re: ISE passiveID with same 802.1x AD join point

eugeniodesideri — Wed, 06 Apr 2022 15:02:06 GMT

here's a couple of screenshot for a better understanding

Re: ISE passiveID with same 802.1x AD join point

Charlie Moreton — Thu, 07 Apr 2022 13:35:36 GMT

What patch is installed on 2.7?

Have you gone through the Active Directory Requirements to Support Easy Connect and Passive Identity services ?

Re: ISE passiveID with same 802.1x AD join point

eugeniodesideri — Thu, 07 Apr 2022 14:46:34 GMT

thx for answering ---- 🙂

I got a patch 4 installed .

Have you gone through the Active Directory Requirements to Support Easy Connect and Passive Identity services ?

- yes i did , plus my cisco ISE deployment is behind the same interface where the AD resides.

Re: ISE passiveID with same 802.1x AD join point

Charlie Moreton — Fri, 08 Apr 2022 12:22:38 GMT

You should absolutely be able to easily do what you are trying. Looks like a call to TAC is in order on this one.

Re: ISE passiveID with same 802.1x AD join point

eugeniodesideri — Wed, 13 Apr 2022 12:42:07 GMT

ok thanks i will forward the issue to a TAC guy 🙂 🙂