10-28-2018 03:56 AM
Hi Cisco exper team,
After upgrading ISE Cluster infra from 2.1 to 2.3, We are getting this additional password prompt as "Network password" on Android phones while trying to register our Android smart phone 6.x/7.x and on above version phones
Please advise on following
Thanks...!
Solved! Go to Solution.
10-28-2018 10:10 AM - edited 10-28-2018 10:54 AM
This is due to Cisco Network Setup Assistant for Android employing RFC 7030 - Enrollment over Secure Trans...
directly with ISE 2.2+
- Is it some additional security policy (for which TCP Port 8084 needs to be open between user phone subnet to ISE-PSN).?
Yes, permitting TCP 8084 to PSN. See CSCvf77241
- Is there a way this additional password prompt can be removed
Not an option at present.
This change is due to
- Is there any other type of phones which could be affected after upgrading of ISE from 2.1 to 2.3
As you mentioned, Android 6+.
- What changes we need to do in Authorization and authentication policy for continue support on apple i phones, Android smart phones
See
10-28-2018 11:31 AM
10-28-2018 10:10 AM - edited 10-28-2018 10:54 AM
This is due to Cisco Network Setup Assistant for Android employing RFC 7030 - Enrollment over Secure Trans...
directly with ISE 2.2+
- Is it some additional security policy (for which TCP Port 8084 needs to be open between user phone subnet to ISE-PSN).?
Yes, permitting TCP 8084 to PSN. See CSCvf77241
- Is there a way this additional password prompt can be removed
Not an option at present.
This change is due to
- Is there any other type of phones which could be affected after upgrading of ISE from 2.1 to 2.3
As you mentioned, Android 6+.
- What changes we need to do in Authorization and authentication policy for continue support on apple i phones, Android smart phones
See
10-28-2018 11:31 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide