Network Access Control

Hello,I have a problem with the following setup:- Cisco ISE 1.2 (latest patch)- Cisco WiSM with 7.0.220.0 (first generation)I have build Guest access via ISE. Because the WiSM's highest version is 7.0.X I used LWA with a redirect to the ISE guest por...

We have been experiencing an ACS issue when our Active Directory servers are patch and rebooted. When this is done, the ACS service must be restarted on both our ACS servers. The ACS servers are Windows 2003 with ACS 4.2. Has anyone else experienced ...

i have a deployment sceniro for  NAC solution ( ISE ) must support 12500 users and must provide the ability to implement security policies onendpoints before they connect so should i order ISE-3395 with ISE -3315 or its not a workable solution please...

Hi,we have an issue with eap-tls authentication with SAN (Subject Alternate Name). The authentication uses the CN instead of SAN. Our enviroment is so build:1 LWAPP Cisco AP1 WLC & 1 WCS1 ACS (4.2.(1) Build 15 Patch 3)1 CA (Certification Authority en...

Hi All,Been tasked with configuring a Cisco SP300-24P Switch to comply with ISE.We currently have ISE running on Cat Switches no issues, my question is regarding is ISE supported on the SP300-24P.I can see that the command aaa new model is not suppor...

Hi,I search CCO on setting the supplicant version for a Cisco AP1600, but so far I could not find anything about it.So my question is; If it is possible the set the 802.1x supplicant version on a AP1600 from version3 (default) to version 1 because th...

We are using ACS to authenticate wireless users. wlans are set up for dot1x+cckm, and the controllers pass the user auths to ACS. ACS is integrated with windows AD for the pass/fail. Pretty standard setup, I believe. Nothing out of the ordinary.Now f...

Hi dears,i want vpn cleint authenticate from ISE server. In ISE server external identity source is Active directory. I configurate vpn client in ASA.I read and understand that i must configurate Inline Posture node in ISE.I confuse something. 1. Mus...

I want to binding username+call_station_id for one for one,call_station_id attributes is IMSI infomation.

                   Hi all,is there a way to push PVLAN configuration via ISE to Access switches.Currently I'm thinking about an authoration profile with an attribute setting PVLAN.Has anyone an idea how to push Private VLan configs dynamiclly to Acce...

Hi All,I have two issues:Is it still an issue when a wired user who is directed to the ISE CWA, is able to stay authenticated as a guest for as long as they stay connected? This is happening on our test pilot - a guest with 2 hour access on a wired c...

I have configured 802.1X authentication on selected ports of a Cisco Catalyst 2960S with Micorsoft NPS Radius authentication on a test LAN. I have tested the authentication with a windows XP laptop, a windows 7 laptop with 802.1X, eap-tls authenticat...