Network Access Control

Hello everyone,At this moment I have a two nodes ISE platform being subordinate CA of a Microsoft Root CA. The deployment needs to include two PSN.I have looked for detailed information about PKI and the procedure to do this architecture change witho...

I'm working on rolling out M$ NPS for RADIUS auth. On my NPS I've got two network policies, one each for privileged (Cisco AV Pair - shell:priv-lvl=15) and unprivileged (Cisco AV Pair - shell:priv-lvl=1). Both are Service-Type Administrative. I was u...

I am trying to connect a Mikrotik Groove to a cisco AIR-SAP1532E-A-K9 but I am unable to connect.  The Groove sees the WAP but will not stay connected.  The vendor thinks that the issue is associated with MS-Chap but I do no see where it is being con...

I have a customer with a new ISE deployment.  They are running 2.1.0.474 with patches 1,2 installed.  We have both machine and user authentication configured. client attempts to log into network over wireless connection (ISE shows a successful machin...

How to perform Cisco ACS 5.5 CLI password recovery without recovery CD

Hi team, I am looking to encrypt the radius shared key as the type 7 Cisco encryption is easily breakable. I have found that Cisco devices only allow Type 0 or type 7 encryption for Radius Shared key. You can specify that the key-value is in clear te...

All,Is there a limit to how many External RADIUS servers we can configure in ISE and functionally use at the same time?     -- Grace and Peace,Robert E Roulhac JrVirtual Systems Engineer IICisco TSN (Technical Solutions Network)rroulhac@cisco.comOffi...

We are currently using D1IM (Dell One Identity Manager) to let markets manage their devices within ACS through REST API. We are planning to decommissioning D1IM this year but before that we need to setup something that will let markets manage their d...

Is there a best practice or design doc that discusses how to open communication from Guest SSID VLAN to ISE guest service portal IP? That can be challenging when guest VLANs are distributed in many countries.Do you open that to go through the interne...