Hello Community,We are in the process of switching from Extreme Networks NAC solution to Cisco ISE.Most of the switches are also replaced with Cisco 9300 switch.Nevertheless, about 100 Summit X440-G2 switches still need to run for a few years and aut...
Hello,I prepared 2 ISE VM in v 3.1 + install the last Patch in view of a future upgrade Principal/Secondary.The two ISE VMs have been prepared with two test IP addresses and hostname (ex. hostname_test.local)I count :- Stop the Secondary VM (old empl...
Hello all, We have a scenario where we have to upgrade from ISE 2.4 Patch 6 to Patch 9 in a distributed deploymentWe have one Primary admin node,one secondary admin,one primary monitoring node, one secondary monitoring node,and 8 PSN's. What would b...
Hi All,I am reaching out to seek assistance with enabling and configuring 802.1x on client machines within our network.Due to the unique nature of the grouping, we have encountered challenges in utilizing Active Directory Group Policy Objects (GPO) f...
Background: I am the technical lead on a project to unite a Fortune 100 company’s routers and switches under a unified Cisco ACS 5.x deployment. This ACS deployment actually was pre-existing and already talks to Active Directory and RSA SecureID. Thi...
is there any solution to authenticate multiple mac address for voice i mean for IP phone into the ISE . My switch is connected with 6 ip phones cisco 2960 , and this switch is connected to cisco other switch model C9410R-is port number and conf deta...
Hello, unfortunately I did not get smart from google. With the following command configure AAA so that I can log in from a Radius server. I understand that and if I add enable at the end, then the enable password is virtually fallback. Now our config...
Hi. i have added an ACL to allow certian IPs to the managment Vlan. Upon adding this ACL i can ssh to the device but get an access denied. upon removing the ACL works fine here is the config- some sensitive details removed interface Vlan200descript...
How can i best structure a large deployment with three Data Centers?
Has anyone been clever enough to use ISE to allow users reset their own device TACACs password? I have been looking the ISE API but don't see an option there. We are large corporation with a lot of operational staff. It would be extremely handy to al...
I want to prefilter Teams media traffic on the Cisco Firepower FTD and i create a corresponing rule that prefilters the affected traffic. But i wonder, what happens to the return traffic from the Microsoft Datacenter to our network? Do i have to crea...
Greetings,I'm trying to figure out how best to implement 802.1x port-based authentication on a network that supports multiple tenants. We control the distribution and access switches with clients connecting to multiple domains on different networks....
I am running ISE 3.0 patch-7 and I use certificate based dot1x for authentication.When the device is successfully authenticated, I see TLSversion and TLSCipher in the ISE log. I also configure the ISE to send these messages to external syslog server...
Hi All I've got an ISE 3.1 P4 and have a slight issue. I have a guest portal running, where a user can register his device for 365 days. I do have a few guest clients with hardcoded proxy settings, so those MAC addresses I manually add into the group...
CISCO ISE 3.2 Advanced Attributes Value field not showing:I'm trying to create Authorization profiles for a virtual appliance for radius authentication. Somehow I was able to create one on another appliance, but I'm trying to replicate the same scena...
