Hi all,I'm in charge to safely bring a pair of SNS-3615-K9 from 2.7 patch 2 to the latest ISE release, 3.2.0.I'm looking for the safest solution and to minimize downtime. Needless to say 2.7 must be upgraded to the latest patch, at the moment being 1...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Vendor id for AVI Load Balancers
Please help with the Vendor ID of AVI devices.
Resolved! Remote access VPN on Dot1.x User
Hi All,we have encountered with the implementation of dot1.x on our remote access VPN users. Since the implementation, we have noticed that our remote access users are unable to log in using their Active Directory username. Instead, we are required t...
Resolved! Setup PEAP on a Wired Network
Hello everyone,I have a bit of a weird situation I'm trying to get working. Lets say I have this theoretical setup. What I'm trying to do is configure some sort of 802.1x authentication over these wired links. So the ActiveDirectory machine is a Wind...
Hiim preparing to upgrade our single ISE node from v3.0 to 3.2ive come across the URT tool but theres a couple of warnings in the guide and id like to confirm if its safe to run this toolThe warnings areDo not run the URT on the Primary Policy Admin...
Do we need to allow any direct communication between ISE and the supplicant? On what port number? I know its radius between the authenticator and ISE ports 1812 and 1813 but from the drawing below, there looks like traffic between the clients and ISE...
Resolved! Dollar Symbol Cisco ISE Live Logs
Hi Guys,I am using ISE 2.7 patch 3 with EAP-TLS for my 802.1x authentication. Authentication was successful however, I noticed in the RADIUS Live Logs that the username field has a dollar sign ($) at the end. Is that normal or is it a cosmetic bug?Th...
Resolved! Cisco ISE Upgrade URT error
Dear Team,We are having distributed deployment of ISE nodes for RADIUS that is 2 PSN, 2 PAN and 2 Monitoring nodes. We are planning to upgrade the firmware from 2.6.0.156 Patch 10 to 3.1.0.518 Patch 4.I was running URT application on Secondary admini...
Dear Everyone, We could see Cisco ISE has Redirect and Non Redirect Posturing but all of those guide are not completed. So i would like to ask if anyone has completed guide with best practice. Please kindly share For better if we can have: - How to c...
Hello Community! I'm trying to design a way for a Guest account with AD credentials as an employee to login and after 2 hours be purged and forced to sign back in to the captive portal. This needs to be automatic without a sponsor. I only see options...
HiI'm looking at securing a High Performance Compute (HPC) node. The node will be accessible from outwith the LAN but access through a stateful firewall causes latency issues - to secure access, I'm planning on a "Science DMZ" using Cisco TrustSec - ...
Resolved! ISE 2.6 ACL-Redirection-Less Posture
HI All, I am configuring ISE 2.6 posture with the "acl-redirection-less way". Meaning I am using the "call-home" functionality. I have already configured the ISE part with the minimum required config. And I have specified all my PSN FQDN in the Call-...
Resolved! ISE + MAB Reauthentication
ISE 3.2 Patch 2.Catlayst 9200 Series + current firmwareThe issue i am having is that all Dot1x + MAB devices are working and authenticating fine - except Printers.Workstations (Windows 11 Laptops) using dot1x are goodMAB devices like, Meraki Cameras...
Hello community, I have a question about the ISE license migration, specifically the ISE Essential license, which currently only runs until October 31, 2023. How will the migration to the new licensing model be after this date? Will there be another ...
Hello there, I would like to ask around and pool some ideas on how other planets are doing in the self-service password reset area for windows user. Do you implement this self-service password reset function for windows users? and what method that y...
