Network Access Control

REST request to ISE 1.4 always returns 0 sessions or errors.

We`ve installed ISE 1.4.0.253 and also use REST API to get session details from ISE.But for some reason ISE always returns 0 or error for the following requests although we have active sessions as shown below: https://ise_ip/admin/API/mnt/Session/A...

ACS 5.5 Email Alerts

Hello everyone,Is it at all possible for ACS's email alerts (especially the failed authentication alert) be able to include the IP address of the offending IP?I've been looking through all the 5.5 guides / installations and can't seem to find if ther...

Resolved! Migration Utility for ACS 5.2 - Fatal Error !! - cannot connect to ACS 4.x DB !!

Hello everybody!If I try to export data from ACS 4.2 it allways fails with the following error massage: Fatal Error !! - cannot connect to ACS 4.x DB !!The release is: 4.2(0) Build 124I dont use RDP, I'm using VMware vShpere client consoleI restarted...

ISE 1.4 snmp polling causing high cpu on 6880 switch

HelloI'm running into an issue with 100% cpu on a Cisco 6880-X switch. The process causing high cpu is the SNMP Engine. The only device snmp polling the switch is Cisco ISE 1.4 patch 3 (3 PSN nodes). SNMP version used is v3 (auth/priv sha/aes) - I se...

Resolved! ISE 1.4 using EAP-TLS can´t identify user in a AD Group

Hi I have a client that want to use EAP-TLS authentication on his Wifi and he only wants the users in a distinct AD group to access the cooperate SSID.I got the solution working with a PEAP authentication but with EAP-TLS it only works without the...

Resolved! ISE 1.4 - Hotspot ACL not working

I configured the Hotspot portal on ISE 1.4The first process works fine, the redirect occurs and the device MAC Address join in the Endpoint group.When I connect again, ISE check if the MAC Address is in the Endpoint group and match the authorization ...

Resolved! ISE and AirWatch MDM Integration

I have been using ISE with the AirWatch integration for over a year. Recently, it seems that AirWatch has updated their certs and now I cannot get ISE and AirWatch to communicate. I can access the AirWatch API URLs through a browser and I see that ...

CoA - Resources Unavailable

hi all, could anyone tell me what CoA error code 506 mean?506Resources UnavailableFrom time to time Im seeing it on ISE (1.4) I see it as an error but what was the cause of it?The session on the switch ended before it receifed CoA request? or what? r...

ACS BACKUP WITH FTP STUCK

Hi,I have a problem with ACS backup to ftp.When i try to perform a backup to repository i am getting this error:% Error: Failed to perform ACS backup: A backup or restore is already in progressand there is no backup or restore in progress right now.....

ACS BACKUP WITH FTP STUCK

Hi,I have a problem with ACS backup to ftp.When i try to perform a backup to repository i am getting this error:% Error: Failed to perform ACS backup: A backup or restore is already in progressand there is no backup or restore in progress right now.....

Resolved! Dynamic VLAN assignment for MAB / ACS 5.5

Hi, Were trying to get MAB working with ACS 5.5, and the ACS part looks good in the logs - the MAC-address is looked up, the authorization profile is correct. But on the switch i get the following: *Mar 1 00:12:53: AAA/AUTHEN/8021X (00000004): Pick ...

Resolved! ACS 5.6 Network Device IP Range overlaps with IP Subnet

Dear Forum, When I configured Network Device for AAA client, I used IP range 172.16.*.1 for device All_Branch_Router, it goes well and I could login with ACS user for those IP range on router.Now I want to configure devices with IP range 172.16.*.2 f...

Multiple password policy in Cisco ACS 5.3

We are using Cisco ACS 5.3, where we are having local identity store.We have created specific password policies also, where password complexity and password expiry policies are defined.Now we want to create another user for which we want the password...

Resolved! Cisco ACS5.7

Dear experts,I would like to ask if anyone can guide me through user authentication in ACS5.7.The problem is, I want to create internal users with the same name as in Active Directory, and take only password from AD.Do you have any experiences on thi...

Cisco Prime Infrastructure 2.1 GUI authentication via RADIUS server (Cisco ISE 1.2 integrated with AD)

Hi, I want to access Cisco PI 2.1 GUI using my AD credentials, so on PI I've enabled RADIUS AAA Mode and added RADIUS servers (two ISE nodes in our case). On ISE I added PI as RADIUS client and configured the same keys. Next, on ISE I created authori...

Network Access Control

Forum Posts

REST request to ISE 1.4 always returns 0 sessions or errors.

ACS 5.5 Email Alerts

Resolved! Migration Utility for ACS 5.2 - Fatal Error !! - cannot connect to ACS 4.x DB !!

ISE 1.4 snmp polling causing high cpu on 6880 switch

Resolved! ISE 1.4 using EAP-TLS can´t identify user in a AD Group

Resolved! ISE 1.4 - Hotspot ACL not working

Resolved! ISE and AirWatch MDM Integration

CoA - Resources Unavailable

ACS BACKUP WITH FTP STUCK

ACS BACKUP WITH FTP STUCK

Resolved! Dynamic VLAN assignment for MAB / ACS 5.5

Resolved! ACS 5.6 Network Device IP Range overlaps with IP Subnet

Multiple password policy in Cisco ACS 5.3

Resolved! Cisco ACS5.7

Cisco Prime Infrastructure 2.1 GUI authentication via RADIUS server (Cisco ISE 1.2 integrated with AD)

ISE Administration Node Replacement

ISE failed to join Active Directory: Error_Access_Denied, How to Fix?

CSCvv82262 - ISE 3.3 menu missing

ISE Machine / User Authentication Questions

secure LDAP not working via ISE DACL

Cisco ISE 3.2 with Azure AD

Failed to send Certificate Auth request to rest ID store: Azure_EntraI

Cisco ISE OVA 37xx or 38xx

IBNS 2.0 with ISE for dot1x

ISE Policy to redirect people to a specific VLAN