Cisco ISE cannot join Windows Server Core.

Jason2005 — Wed, 24 Apr 2024 13:48:44 GMT

My Windows Server Core having an internal address of 192.168.50.2, when natting it (NAT) it has an address of 192.168.99.36 (I'm installing Windows Server Core image on an EVE-NG VM and the EVE-NG VM is installed on ESXi).

I have a Cisco ISE VM installed on my ESXi having an address of 192.168.99.35.

Cisco ISE could ping SRVCore.local, server.com, ise1.SRVCore.local, core2019r2.SRVCore.local (Windows Server domain names).

But when joining Cisco ISE via its GUI to the Active Directory installed on Windows Server Core, I can't join it an it ends with a TIME OUT ERROR.

@cisco

Re: Cisco ISE cannot join Windows Server Core.

Aref Alsouqi — Thu, 25 Apr 2024 13:42:28 GMT

I can't remember, but I think as a requirement the AD shouldn't be behind a NAT device. This is definitely the case with ISE-PIC and AD probes and I think the same applies to joining ISE to the AD.

topic Cisco ISE cannot join Windows Server Core. in Network Access Control

Cisco ISE cannot join Windows Server Core.

Re: Cisco ISE cannot join Windows Server Core.