We currently have a pair of ISE for network device access and authenticating VPN and Wireless. Now this is for about 14000 users. We plan on setting up a larger ISE deployment to use for authentication on the VPN and wireless as well as wired 802.1...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
RADIUS Attributes in Config VS Packet TraceSwitch is added to TEST Device ProfileError logs from ISE Evening.. I have a problem with ISE. I'm using ISE 2.3 (not patch 1 yet) and we're running Adaptive Network Control against some HP switches. I'v...
Working with a school district that owns approximately 5000 Apple iPads. At this time, the school district does not have an MDM system in place. The school district also does not have an inventory of the MAC addresses for the iPads they own. For each...
Resolved! NAD Group tree remove
Hi all, I am working on a POV where I need to create an authorization rule that is the following:If “NameOfTheLocation” contains “AD Group that the user belongs” (string comparison) then AccessWhich gives the following: But I realized it does not wor...
Resolved! ISE-PIC and AD Domains
Hi Team,I read ISE-PIC FAQ and I see it supports maximum of 100 domain controllers. But does it support more than 1 AD domain ? If yes, what is the maximum ?Thanks a lotFabio
Resolved! cwa redirect issue
Hello Everybody;i have cisco ise 2.1 and cisco 2504 wlc (8.2.141 ver) on my environmentwhen i connect the ssid for the first time , i am redirected to CWA page. however when i close the browser , reopen it and try to open any page the redirection fai...
Resolved! ISE sponsor single click issue
Hi Expert, I am running a ISE POC with customer doing guest portal and sponsor portal. The guest flow and sponsor approval flow as below. (1) guest get redirect to self-registration portal and key in his info plus the email address of the sponsor (2)...
I noticed that ISE is not setting the DSCP value for Radius or any other communication. On our switches we mark RADIUS with DSCP CS6, but the RADIUS accept messages from the ISE PSN’s use CS0 (0000 0000). Is there an option to mark this traffic on ...
We configuring ISE for MAB authentication using an external MAC Address database that contains a list of MAC Addresses and Endpoint Type (for example Printer, Workstation, HVAC, VOICE). We have created a custom attribute called "CompanyInfo" of the t...
Resolved! ISE Interface Alias and EAP Cert
Hello,I fully understand how ISE interface alias works for Portal services on non-Eth0. My question is regarding EAP Cert using Public CA. I will use the following scenario:ISE hostname = ise1.company.localEAP SAN = ise1-aaa.company.comInterface = Et...
I have implemented ISE in standalone role and also have Plus license. Now I want to create Cisco ISE node as a secondary node. Should I buy a new VM again to deploy secondary node? And as I understood I don't have to buy another Plus license for seco...
Resolved! public certificate for cisco ise portal
Hello Everybodywe use cisco ise 2.3 we have wildcart certificate *.cisco.com and i want to use in this way iseportal.cisco.com for portal(CWA)how can i use this public certthank you
Hello we are planning to setup standalone (all personas in same node) Cisco ISE with 2 redundant nodes. the main purpose is device administration. 1. we have around 1000 non-cisco network devices, so RADIUS is used for login and accounting of device...
Resolved! Service Renewal
Customer was on ACS 5.3 (VM) with SAS and ordered CSACS-5.8SW-SR-K9= to migrate to ACS 5.8.After migrating to ACS 5.8, the SAS service has expired and wishes to renew SmartNet.What service should they order?Do they renew with CON-SSSAS-CSACS589 from ...
If I have ACS 5.5 running on SNS-3415, is it possible to back it up and restore it on an ACS instance running on VMware?Thanks,-Dan
