Network Access Control

Hi All,Can we able to create an admin username and password with role admin in the cli.I have access to the cli using a user account and I was trying to create an admin username and password.I have created one but i cannot access using those credenti...

I have below config on switch (C2960S-UNIVERSALK9-M), Version 15.0(2)SE7,aaa group server tacacs+ testgroup server name test1 server name test2 server name test3tacacs server test1 address ipv4 192.1.1.1 key 7 testkey timeout 3 single-connectionSimil...

Hello,say I want to have five ISE 1.3 nodes behind load balancer, I want only only G0 behind LB, and G1 interfaces will be dedicated for certain things. Specifically I want to use G1 interface for Redirected Web Portal access (could be CWA, device re...

Hi everybody;I read Cisco Trustsec document and want to ask some questions: 1. as I understand, in Cisco TrustSec domain we need to have at least one authenticator device at anytime. if we have just 1 switch in the network, it will act as authenticat...

Hi, It is neccesary configure IPEP if we dont want posture into vpn remote users? I know that IPEP works with Cisco ASA for VPN posture assessment , so the question is what about VPN concentrator StoneGate ?Has anyone tested IPEP inline posture with ...

This is an opportunity to learn and ask questions about how to configure and troubleshoot the new Cisco Secure Access Control System (ACS) 5 Installation. Ask questions from Monday, May 11th, 2015 to Friday, May 22, 2015Javier Henderson has been a cu...

Is it possible to feed phone number field $ui_phone_number$ as username on ISE Guest Self-service portal?I would like guests to only enter mobile phone number in self-registration portal and then receive a sms with mobile phone number as username and...

I just implemented some AAA config in the switch configuration so all my telnet users are validated by ISE. But now it looks like the config also affected the console login which was not intended.. How should I implement this without affecting the co...

hi all, when migrating switch from 15.0.1 to the new one I can't get 802.1x working cause on the session there is "blocked on: AAA not ready" previously it worked well - what changed in 15.2.3? I'm not using IBNS 2.0 so the config is the same (typica...

Hi. I want to hear this forum about how the ISE can receive SNMP message from Swith or Router? I am interested to send LINKUP and LINKDOWN messages to my ISE server so I can monitor my SNMP messages from the ISE GUI or CLI. But I cannot find any docu...

Since the upgrade to ACS 5.6 we are not able to edit user settings in the 'Internal User Identity Store' anymore.As soon as we click the 'submit' button in the 'user edit screen' we are immediately kicked out of the application and we land on the ACS...

HiCisco Identity Services Engine User Guide, Release 1.2, chapter 5, Administering Cisco ISE, page 5.4 deals with changing time zones on an ISE node.  First, it describes how to change the time zone via CLI.  Then it goes on to tell you that a) doing...

Hi Everyone,I am currently using Cisco ACS 5.4 with patch 7  only to manage users logging into network devices (i.e. TACACS+ and radius). Cisco just releases 5.7 on May 12th.  Any benefits to upgrade from 5.4 patch 7 to ACS 5.7?on the release notes, ...