Network Access Control

Does Cisco TACACS ACS v4.2 support Juniper devices?

Hi, We have a number of Juniper devies in our network. Authentication works fine with our Cisco and Juniper devices. Administration works fine with the Cisco devices but not the Junipers. Juniper TAC has triple checked our configs and they are good. ...

Cannot Retrieve Active Directory Groups

Hi AllI recently connected my ACS deployment to Active Directory 2003. However when I try to add the active directory groups for group mapping, i.e. navigating to Users and Identity Stores > External Identity Stores > Active Directory > Directory Gro...

Cisco 2960-X & ISE accounting- username Radius attribute missing

Hi,I'm facing an issue with cisco 2960 switch radius accounting with Cisco ISE1.2.1 .here is my senario:- Username (vendor1) is configured in ISE local database, under group (VENDOR)- Authentication protocol : wired MAB - Authentication method : we...

Resolved! Changing local admin password on Cisco ISE in distributed deployment

Hi guys, I manage four Cisco ISEs in a distributed environment.First ISE is the Admin, second ISE is Monitoring, third and fourth are the PSNs.We use local authentication. We want to change the password for the admin username.Will this by any chance ...

Resolved! UDI failure trying to install ISE 1.3 on UCS C220 M3s

We have currently purchased a new Cisco UCS C220 M3S for the intension of installing ISE for lab purposes.Below is the kit we orderedUCSC-C220-M3S1Cisco UCS C220 M3 SFF without CPU mem HDD PCIe PSU w/rail kitUCS-CPU-E5-264012.50 GHz E5-2640/95W 6C/15...

MAB problem on Catalyst 2960 Switch

Hello, I have problem with 801.X MAB authentication on Cisco WS-C2960-24PC-L switches. Hire is port configuration on Cat 2960 switch interface FastEthernet0/2switchport access vlan 31 switchport mode access authentication order mab authentication po...

Resolved! no aaa new-model persistent in config

Hello all. First Cisco router and first post so please be kind.I did a search on this and I am not getting the same as in the post that show issuingrouter(config)#no aaa new-modelIOS 12.4(24)I erased the router and started over when i got it.I had co...

ACS server migration AD issue.

AD issues while migrating from cisco ACS 4.x to 5.x? AD base authentication failure

iOS 8.x Apple users and CISCO ISE native supplicant provisioning not working

Hi there guys , I was wondering if anybody else have the following problem:Apple iOS 8.x users are not able to register their devices on the ISE portal (native supplicant provisioning).After they receive the redirection from the WLC, they freeze. Ap...

ISE 1.3 or Prime 2.1 NFS Backup to Synology NAS

Hello,I have try this week to Backup the ISE and Prime to a Synology NAS.Since a time i´m sure that the configuration on ISE an Prime are ok also DNS an Ping are ok.The staging url is nfs://<servername>.it.lokal:/volume1/CiscoBackup/The debug on both...

Resolved! ISE profiling BQ devices

Hi, in spain there are lots of BQ devices most of them android and some ereaders with mac address OIU 4C:74:03The browser user agent shows:Mozilla/5.0 (Linux; Android 4.4.2; Aquaris E5 HD Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/3...

ACS 5.4 to 5.5 or 5.6 ? SNS 3415

Hi, We are planning to upgrade our ACS server SNS 3415 appliance from 5.4 to 5.5 or 5.6 as 5.4 is struggling to talk to AD which is on 2012 R2 for wireless authentication. I have downloaded both the images now for SNS appliance (5.5 & 5.6) , which on...

ISE 1.3 and NAC

I have a customer running 5508 WLCs across the estate, and I'm retrofitting IEEE802.1x authentication for the corporate WLAN, and WebAuth for the Guest WLAN...they have PSK on both at the moment :(They have AD and are showing great interest in ISE an...

ISE 1.2 Self Registration

HiI have set up self registration on an ISE 1.2 and am using a customised portal.Everything works OK except for one annoying element.Although I have assigned a time profile of 30 days as a test - the self registered accounts always expire after 5 day...

CISCO ACA 4.1 synchornization issue

Hi All, I have 4 TACACS servers (1,2,3,4). 1 being the primary and the other 3 are secondary. The issue is 2 and 3 are syncing but the 4 is not syncing when i made changes in 1. I can see the all the AAA clients in 2 and 3. But when i sea...

Network Access Control

Forum Posts

Does Cisco TACACS ACS v4.2 support Juniper devices?

Cannot Retrieve Active Directory Groups

Cisco 2960-X & ISE accounting- username Radius attribute missing

Resolved! Changing local admin password on Cisco ISE in distributed deployment

Resolved! UDI failure trying to install ISE 1.3 on UCS C220 M3s

MAB problem on Catalyst 2960 Switch

Resolved! no aaa new-model persistent in config

ACS server migration AD issue.

iOS 8.x Apple users and CISCO ISE native supplicant provisioning not working

ISE 1.3 or Prime 2.1 NFS Backup to Synology NAS

Resolved! ISE profiling BQ devices

ACS 5.4 to 5.5 or 5.6 ? SNS 3415

ISE 1.3 and NAC

ISE 1.2 Self Registration

CISCO ACA 4.1 synchornization issue

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Rest API - Update user - ERSException - Operation is not permitted

Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Cisco ISE Guest Portal Login using Azure - Open Multiple Tabs

Profiling Policy based on MACOUI Name or MAC Address Hex Prefix ?

Can AnyConnect ISE posture popup action be changed?

When will Cisco stop supporting ISE version 3.0?

C9200 - MAB set up and not able to ping or access to a shared folder

Edit Trusted Certificate ISE 3.1.0.518 P3 of my Private CA

Cisco ISE with AADJ device and user first login

Annoying TAC: Load-balanced picking not yet implemented messages