topic Re: Cisco Prime and ISE intergration in Wireless

Cisco Prime and ISE intergration

ittechk4u1 — Mon, 05 Jul 2021 18:03:01 GMT

Hello Experts,

Earlier (Before SSL certificate installation) CPI and ISE was working together but now...I am struggling to get integrate CPI and ISE.

ISE version: 2.1.0.474

CPI: 3.5.0.0.55.0

Error(s): You must correct the following error(s) before proceeding:

Error: The connection to ISE with IP address "xx.xx.xx.xx" has timed out. Please check the network connectivity and the user account status on the ISE.

Thanks

Re: Cisco Prime and ISE intergration

Flavio Miranda — Wed, 25 Sep 2019 12:51:30 GMT

Considering you actually have connectivity OK, this probably a Bug.

-If I helped you somehow, please, rate it as useful.-

Re: Cisco Prime and ISE intergration

pieterh — Wed, 25 Sep 2019 12:55:58 GMT

at first check if time-sync and time-zone match.

if this is both self signed certificate then both need to "know" and trust each others certificate

if it is public certificate, then both bust know and trust the root and intermediate certificate in the chain.

Re: Cisco Prime and ISE intergration

ittechk4u1 — Thu, 26 Sep 2019 04:33:13 GMT

Even i guess so. I will check if i can raise a TAC case ..

Re: Cisco Prime and ISE intergration

ittechk4u1 — Thu, 26 Sep 2019 04:35:15 GMT

Time is correct on both.

I installed wildcard CA signed cert on ISE and SSL cert signed by CA on cisoc prime but prime showing error "Mismatched address" as certificate error.

I suspect its the issue with TLSV1 handshake.

Thanks

Re: Cisco Prime and ISE intergration

Sandeep Choudhary — Fri, 27 Sep 2019 11:21:31 GMT

Hi,

Did you installed the new certificates on both ? if yes then you need to delete the old certificate of ISE from Cisco prime CLI.

Regards

Dont forget to rate helpful posts

Re: Cisco Prime and ISE intergration

ittechk4u1 — Mon, 30 Sep 2019 05:39:29 GMT

Let me try it. Thank for suggestion.

Re: Cisco Prime and ISE intergration

ittechk4u1 — Mon, 30 Sep 2019 06:50:02 GMT

can you please tell me how can i do it ? I tried but didn't find a way...

Thanks

Re: Cisco Prime and ISE intergration

Sandeep Choudhary — Mon, 30 Sep 2019 06:56:52 GMT

check under tofu-certs or trusted certs:

check the old certs: ncs certvalidation tofu-certs listcerts

Delete using the command: ncs certvalidation tofu-certs deletecert host IP_PORT

Regards

Dont forget to rate helpful posts

Re: Cisco Prime and ISE intergration

ittechk4u1 — Mon, 30 Sep 2019 07:09:14 GMT

Excellent. It worked now after deletion of trusted old certs.

Thank a lot. you guys are awesome.

Re: Cisco Prime and ISE intergration

Sandeep Choudhary — Mon, 30 Sep 2019 07:17:33 GMT

Glad it helped. Thanks for rating.

Re: Cisco Prime and ISE intergration

Marvin Rhoads — Thu, 07 Nov 2024 14:18:47 GMT

Old thread... but the solution helped me in 2024.

Thanks @Sandeep Choudhary