Network Access Control

I am running Cisco ACS( Version : 5.4.0.46.0a)  802.1x with certificate based authentication for Wired connections. the issus is i found some authentication failed messages in some switch port. when I troubleshooting in ACS, it is an error: "22056 Su...

Currently running 1.4 patch 3. After a sponsor creates a guest account, that guest can not auth due to it being marked as disabled in the internal database. A couple of people on the forums had this problem, but the solutions for 1.1 and 1.2 dont mat...

Hi to all,we're using ISE 1.4.0.253 patch 3.Somehow the guest tickets created from sponsor portal have the wrong duration.For example:duration of 3 daysstart time: 2015-08-31 8:12amend time: 2015-09-02 8:12amthat's just 2 days instead of 3!In the tic...

HI Friends,We recently installed ISE in our company for guest access and using hotspot feature for authentication.we have 3 ISE nodes in VM, admin, moni and policy. all having 32 GB RAM and minimum of 300GB HD. The issue is we getting user complaints...

Hi, folks.has anybody an idea why ISE 1.x (1.4 exactly) is constantly throwing an alarm that one/all of the configured nameservers may be down ?? This alarm constantly repeats, but the configured nameservers are of course reachable and the dns servic...

Hi Community I walked around this bug, but was not able to find the real reason and solution for it. The setup is like this:=== PRIMARY HOST:Int Gig 0 ip addr 1.1.1.1/24Int Gig 1ip addr 2.2.2.2/24FQDN: ise1-gig0.adm-abc.comdefault Gateway 2.2.2.1=== ...

Hi Cisco ISE Gurus,My client just found an issue with ISE configured switch.  When a laptop connected to a switch port with ISE configured,  the MAC address will stick to that port and even if the laptop is unplugged. So when the user connect the lap...

We are going to implement dot1x authentication and I'm doing some tests right now. I had it working before configuring some other ISE features, but now when I boot up when connected to a port, Operations > Authentication in ISE shows the authenticati...

There is a bug in 1.4 patch 3 on the SMS gateway settings of ISE. If you attempted to add a new SMS gateway with the SMS Email Gateway option you have to enter an e-mail address in the optional Provider account address and SMTP API destination addres...

I'm trying to setup 802.1x on switch with Microsoft NPS Server as RADIUS Server just for DATA VLAN authentication, no voice VLAN authentication...When I run the command "authentication host-mode single-host" it doesn't apply the config on the interfa...

Hi Guys, Just want to clear a point, if i have a IP phone and Laptop connected behind it. Is it possible only authenticate Laptop and not authenticate the IP Phone using MAB or anything other dot1x authentcation??? Any suggestion is welcomed, as we a...

Hello,I've currently setup PAN and MnT on the same hardware. How can I move MnT to a new hardware 3495?Is there any link that I can refer to?

Hi,I'm trying to install Cisco NAC Agent silently using the following "msiexec" line:msiexec.exe /i nacagentsetup-win.msi /qn /l*v c:\temp\agent-install.logThe installation works fine, but is there anyway to remove creating the desktop/start menu sho...

We need to use the NEW AUP feature that comes on ISE version 1.4 for our soon 802.1x implementation so I would like to get feedback about that version because is a relatively new release. We are currently running 1.2.1.198thanksAC