topic Re: ISE Question in Network Access Control

ISE Question

benolyndav — Mon, 19 Dec 2022 09:18:46 GMT

We are having issues logging inot our primary admin node I'm wondering if I run an application stop and start ISE will this break dot1x or is it way I think it is and the PSN nodes deal with dot1x ??

Thanls

Re: ISE Question

Rob Ingram — Mon, 19 Dec 2022 11:06:14 GMT

@benolyndav new and existing 802.1x it should be ok, assuming you have another PSN.

Some features are unavailable when the PAN is unavailable, refer to this guide.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_deployment.html#ID59

I recommend reboot/restart the PAN services OOO in a change window.

Re: ISE Question

benolyndav — Mon, 19 Dec 2022 12:05:20 GMT

Thanks for the info have you any ideas as to why I cant login anymore., I can however login into the Secondary pan node in another data centre.?

Re: ISE Question

Rob Ingram — Mon, 19 Dec 2022 12:44:18 GMT

@benolyndav did the local admin password expire?

You can reset the admin password by booting ISE from the ISO image and selecting recover administrator password. Guide: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

https://integratingit.wordpress.com/2017/10/15/reset-cisco-ise-webguicli-passwords/

Re: ISE Question

benolyndav — Mon, 19 Dec 2022 15:32:05 GMT

I can still access the vm through putty is there a way to check on the cli for anything.?

Re: ISE Question

Rob Ingram — Mon, 19 Dec 2022 15:46:10 GMT

@benolyndav do you get an authentication failure or can you not access the GUI? Have you reset the GUI password from the CLI?

I assume you are attempting to login using the local admin account rather than to the GUI using an AD account.

Re: ISE Question

benolyndav — Mon, 19 Dec 2022 16:03:32 GMT

Get this when trying to login to gui with AD account not sure how and why this is now happening.?

Oops. Something went wrong

Invalid request.

Request not processed - Bad input.
Please notify your administrator. If you are the administrator check your log file.
You may proceed to Login page.

Re: ISE Question

Rob Ingram — Mon, 19 Dec 2022 16:07:10 GMT

@benolyndav perhaps an issue with the AD integration? Can you try logging on to the GUI using the local admin account (reset the password using the link above if required).