Network Access Control

Hi, We have a distributed ISE infrastructure version 1.3.We begin noticing the following problem.Randomly the PSN's started dropping radius requests.Basically they didn't serviced any client. It looked like this bug: ISE PSN rejecting RADIUS request;...

We are a small business of 700 users on 26 locations. We have two 1121 Appliances, and they're installed running ver 5.6. Both are standalone - primary. I am configuring a deployment for redundancy, and I found this article - http://www.cisco.com/c/e...

We had a situation where the DB was corrupted in the process of doing an ISE upgrade from 1.1.4 to 1.2. As a result of which the entire network was down.Is there a way to monitor DB health on regular basis just so as to avoid the above situation in f...

Hello ,Can anyone tell me, when Cisco will enable support for Inline-SGT on ASA firewalls ? Thanks,   

The ACS only displays the NAD IP-address in the log. I have registered all the NAD's in DNS, but there's no DNS-lookup on the NAD ip's. Is it possible to make the ACS use DNS name instead of IP when displaying the NAD's in the log?

Hi , I keep get this error when i try to download any client provisioning remote resource  java.net.SocketTimeoutException: Read timed out;WinSPWizard 1.0.0.43 The proxy settings have been changed , that did not make and difference . Thanks, Khaled

Hi all,Currently i'm using an ACS4.2 as radius server, some switch 2960-s ios 12.2.(55)se5, ipphone Alcatel iptouch 4018 and i would like to assign dinamic vlan to some specific users/laptop Daisy-chained to ip phone.Logic connection is:   users lapt...

Hi,I am trying to send the credentials of a guest user via sms, but does not work. I used the following parameters in configuration of the SMS gateway (ISE):http://admin:12345@192.168.71.11/cgi-bin/exec?cmd=api_queue_sms&username=admin&password=admin...

I'm in the middle of a migration from ACS 3.3 (Windows) to ACS 5.4, and I'm adding some Nexus 7Ks to add to the ACS 5.4.Previously, these 7Ks we're never on the ACS 3.3.  The reason, I was told, is because ACS 3.3 didn't support Nexus (NX-OS n7000-s2...

I am setting up guest wireless in my enterprise using Cisco ISE 1.3. I have set up Authorization profiles and Authentication conditions for Guest Wireless. I am however not sure of the Authentication results (the allowed protocol section). Since I wa...

I set up a trial version of an ACS server, put it in VMWare. I went through the whole set up process, ACS installed correctly but cannot ping anything from the ACS in my LAN (i chose 'bridged mode' in vmware). Is there anything else I should do? When...

We have guests that visit our office and connect to the Guest WiFi. We want to implement ISE for the self-sign in portal. That would help us determine the user and have them accept the legal terms without involving IT. When a guests logs in and surfs...

Hello, guys.I have ACS 5.4 and 2960 switch.I have configured aaa with tacacs.But every time I get error:13017 Received TACACS+ packet from unknown Network Device or AAA ClientBut I several times checked shared key on both sides and changed it, but no...

Hello,I need to change the hostname of our ISE install.  TAC stated I need to use the command of application reset-config ise to do so.  I was wondering if my old license files can be reused or do I need to get new ones from Cisco.  I have a case op...

Dear all, I come to know that cisco ISE posturing is not supported in cisco catalyst switches with LAN Lite image. Is there any way out to manage it with any agents installed ? Regards,Bikash