Hi, last week we migrated to ISE 1.2 Patch 7 and since then we are having trouble with our corporate SSID.We have a rule that says :1) User is domain user.2) Machine is authenticated.But for some reason that I can't figure out some machine(I would sa...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Cisco ISE Certificates
Hi,I'm new to Cisco ISE and I'm trying to get my head around how it all works.Can I ask, how do you know which certificate in ISE a computer will authenticate against?I'm setting up ISE to use EAP-TLS using a trusted root certificate and I have the c...
Resolved! ISE 2.0 support with 2960-X Lan Lite
Hi team,In our device compatibility docs of ISE, I see some confusions:For ISE 1.2, we mentioned that 2960 LAN Lite is supported but not recommended with ISE 1.2 due to limited feature support. LAN Lite supports only 802.1X and VLAN assignmentsFor IS...
Hi all;If ISE is implemented in air-gapped scenarios (where ISE cannot connect to the internet), how can I download the latest version of Network Setup Assistant for Windows from Cisco's web site?Thanks
Resolved! Secondary node not synced
Hello We have an old ise 2.7 deployment with 2 notes. The PPAN is fine but the Secondary is out of sync since along time.... (several months) Looks they can not communicate anymore. We need of course to check dns, ntp , certs and network connectivity...
I am needing to know how to disable drive locate function as I am getting a flashing Amber LED on my drive. I am running version 3.1 on my SNS-3615, also my system health LED is steady Amber. This all started after I upgraded to 3.1.
Resolved! ISE Backup and Restore Question
Hello Community,I am in the process of upgrading our ISE hardware from SNS-3595-K9 Version 2.7 to SNS-3755-K9 Version 3.1 and I am at the point where I will be restoring the data to our new environment from the shared repository we have set up that r...
Hey guys!I am studying a demand to enable smartphone authentication on the BYOD network, with authentication via EAP-TLS on Cisco ISE.I have experience in previous projects, where I configured EAP-TLS authentication for computers, which received a pe...
Hello All, My understanding of Monitor Mode is that the switch (in our case)makes the authentication request to the Cisco ISE, but it ignores the result and provides access to the network. We had the experience that when a policy was created that ret...
Resolved! Wied 802.1X Using Certificate
We are looking to implement wired 802.1X, but we would like to use a certificate to authenticate so that users do not have to authenticate, especially on desktops shared by staff. We tried to implement this using PEAP with EAP-TLS for the inner tunne...
Hello!We have:- ISE 3.0.0.458- AnyConnect- ASAUsers connect with AnyConnect to the corporate network using a certificate. On ASA - We take the attribute CN from it (username-from-certificate CN).Example: CN - Ivan Ivanov. During authentication, ISE s...
Hello, I'm struggling to find a way to indicate to registered guest users why their authentication fails at login. For example, the guest account may have expired; however the only error message displayed is 'Authentication failed'. Other reasons may...
Ok, so this alarm is coming in repeatedly and is now on my projects list. I get email alerts from the server that list thr NAD IP as the endpoint device and the Endpoint IP address is correct. I've checked the settings and the endpoint is not liste...
Hi everybody;According to Cisco's documents, if a port is defined in "Common Ports", when you want to add it again to the "Custom Ports" section, the "Port is predefined" error message appears (as shown below). In other words, you cannot use the same...
We are about to implement AAA/TACACS admin authentication for switches on our remote site and we need to make sure that once we paste the script that we do not loose access to the remote switch. is there any tips on doing this without loosing access ...
