Network Access Control

Hi,Devices:ACS 5.4.4.46.0aWS-C3550-48 with IOS c3550-ipbasek9-mz.122-25.SEB1.bin When I was adding the switch above on ACS, I used 16 characters of shared secret and used it on the TACACS switch configuration as the key. Tried to login to the switch ...

Hi, we are getting internal error 500 when we are trying to do guest portal on port 8443 and even after changing it it coming the same.i have tried to restart the service after changing the port number. I am using ise 1.3 patch 4.Is there any bug or ...

HiIs there a way to do location based authorization rules in the ISE. We need that for giving out different authorizations to VPN users based on their location they are connecting from. RegardsRoberto

Hi Support Community,Probably a very stupid question!I have an 8 node (2 x PAN, 2 x MnT, 4 x PSN) virtual ISE deployment running 1.2.0.899 and last year I stupidly forgot to change the initial default 45 days password expiration.This meant I was lock...

Hi All,Two of my ISE nodes (in an 8 node 1.2 deployment) have expired CLI admin passwords (I know I'm stupid!)One is the Secondary MnT node and one is a PSN node (1 of 4).I have information on what I need to do to get a new password but do I need to ...

Hi everyone ,We use ISE version 1.2 in distributed deployment and I want to create test node with same production configuration. How can I use adm node backup for test node ?Thanks a lot

Hi all,i need to implement this solution but I lack configurations as concerns FreeRadius configuration. I tried classic MAC & EAP authentication but i can't get Captive Portal working. Any help ?

hi, Two of my devices are connected to DHCP server. I want to copy https or any certificate on DHCP server and whomever device got IP from DHCP server, will get this certificate. Please suggest if it possible. If yes, please tell me the steps. Thank ...

What is the best practice with ISE 1.3 or 1.4 for a sponsored guest authorization rule condition? I've seen several approaches in various guides: Guest User identity group (Factory group in ISE)Activated Guest User identity groupNetworkAccess:UseCase...

Hi,with Firefox 39 it is no longer possible to access the guestportal login page when using CWA because Firefox 39 rejects the page with a diffie hellman key exchange error message. Reason is, that FF expects a minimum key length of 512 bits (RSA) or...

HiI need limited access to cisco ASA 5520 for same operators. This operators can switch on/off vpn policy ONLYI grant "privilege cmd level 3 mode group-policy command vpn-tunnel-protocol","privilege cmd level 3 mode exec command configure" and "privi...

Hi I just installed ACS 5.1 from the ISO into our ESX vsphere server.  Install went great and even saw applications get installed.  when system rebooted, I logged in successfully.  tried to check status on application acs, but nothing. ran:  show app...

Hi All,I got distributed ISEs setup in both location.Below the deployment setup.MY1-ISE-01 PRI(A) PRI(M)SG1-ISE-01 SEC(A) SEC(M)Below the current AD connection.MY1-ISE-01 connected to myad01.adg.localSG2-ISE-01 connected to sgad01.adg.local I brought...