Network Access Control

Hi,we have an issue with eap-tls authentication with SAN (Subject Alternate Name). The authentication uses the CN instead of SAN. Our enviroment is so build:1 LWAPP Cisco AP1 WLC & 1 WCS1 ACS (4.2.(1) Build 15 Patch 3)1 CA (Certification Authority en...

Hi All,Been tasked with configuring a Cisco SP300-24P Switch to comply with ISE.We currently have ISE running on Cat Switches no issues, my question is regarding is ISE supported on the SP300-24P.I can see that the command aaa new model is not suppor...

Hi,I search CCO on setting the supplicant version for a Cisco AP1600, but so far I could not find anything about it.So my question is; If it is possible the set the 802.1x supplicant version on a AP1600 from version3 (default) to version 1 because th...

We are using ACS to authenticate wireless users. wlans are set up for dot1x+cckm, and the controllers pass the user auths to ACS. ACS is integrated with windows AD for the pass/fail. Pretty standard setup, I believe. Nothing out of the ordinary.Now f...

Hi dears,i want vpn cleint authenticate from ISE server. In ISE server external identity source is Active directory. I configurate vpn client in ASA.I read and understand that i must configurate Inline Posture node in ISE.I confuse something. 1. Mus...

I want to binding username+call_station_id for one for one,call_station_id attributes is IMSI infomation.

                   Hi all,is there a way to push PVLAN configuration via ISE to Access switches.Currently I'm thinking about an authoration profile with an attribute setting PVLAN.Has anyone an idea how to push Private VLan configs dynamiclly to Acce...

Hi All,I have two issues:Is it still an issue when a wired user who is directed to the ISE CWA, is able to stay authenticated as a guest for as long as they stay connected? This is happening on our test pilot - a guest with 2 hour access on a wired c...

I have configured 802.1X authentication on selected ports of a Cisco Catalyst 2960S with Micorsoft NPS Radius authentication on a test LAN. I have tested the authentication with a windows XP laptop, a windows 7 laptop with 802.1X, eap-tls authenticat...

I'm trying to setup at iterative identity policy for EAP-TLS authentication.  Basically I'd like one rule to be tested then based on the result either proceed to authorization policy evaluation or go to the next identity policy rule.For example, I ha...

I currently have ISE version 1.1.1.268 installed in an ESXI 5.1 lab environment  so I can get used to how it works but when logging in, I get the error code 500 message. I have tried it in both Firefox 26.0 and IE 11 on a Windows 7 MachineThe specs o...

Hi I want to create a Network access authorization policy which bind authoriztion profiles for users in certain identifty groups,yet I dont have the condition "identity group" the only conditions i have are  "NDG:Location,           Time And Date" .n...

Setup WLC 5508 to Eval ACS 5.3 and set ACS external DB to AD.It's working fine with ASA VPN client ( VPN client to ASA then authenticate to ACS with AD)But when testing wireless authentication from WLC 5508 to ACS 5.3, it couldn't get thru and kept s...