Folks,We have one requirement coming up on our NAC with Cisco ISE. We did test something like ensuring only applicable devices are able to connect to the network.e.g. with a Polycom phone we have done a match with vendor MAC OUI. However, what is som...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Port-Authentication (dot1x) not working
Hello,Windows send EAPOL and there is no answer from the switch.This has work for feew weeks.What can I do?show auth sess int Gi121/1/0/9Interface: GigabitEthernet121/1/0/9MAC Address: UnknownIP Address: UnknownUser-Name: UNRESPONSIVEStatus: RunningD...
Resolved! Cicso B2B router logs on QRadar SIEM
I am looking for the details of which type of logs of CISCO B2B router are logged in QRadar SIEM. Regards,
Hi all;Is it possible to upload the ISE patch file to local disk of ISE 3.0 and above, create a repository of type "DISK" and then install the patch using the created repository in CLI?Thanks
We have a 6 node ISE deployment, which includes 4 PSNs. They are load balanced via an F5 load balancerFor the My Devices Portal setup would I need to create a new F5 VIP and load balance it between the PSNs I choose?Is there an option besides creatin...
Over the past few weeks, I have been working on configuring 802.1x port-based authentication between my Cisco switch (RADIUS Client) and the NPS Server (My DC) using EAP-TLS authentication.After completing the configuration on both sides following t...
Resolved! Admin Certificate Renewal: Impact
At the moment we have individual certificates deployed to each ISE node for Admin purpose. We also have wildcard certificate which we use for EAP Authentication and sponsors portal. The problem is that due to HSTS ISE PSN presents its own Admin certi...
Hello ISE experts,May I ask how to set up Cisco ISE to auto-restart after a power outage? Thanks in advance.My Cisco ISE Version is 3.1.0.518 with Patch 6Regards,Jerry
Hi, After a few years I've made the first post. I made a project in GNS3 where I've implemented authentication login RADIUS and DOT1X for hosts.The motive of this post is always improve everyone knowledge but also present, my simple point of view, a...
Hello,I am at an impasse when it comes to deploying HTTPS API for Environment Data Download.We have configured our Windows Sub CA with NDES which allows us to use SCEP for certificate enrollment for our trustpoint. When specifying the fingerprint of ...
Hi, I have TekRadius server running, when i try to login to my cisco 2960 switch through consol it's working fine but when i try to login through telnet/ssh it doest not let me in.any help will be much appriciated.Kind regards,
I am trying to update the network device location and type using the PATCH method for the ers/config/networkdevice/name/{name} API endpoint. Please see attached screenshot for details. ISE Version:3.2.0.542Response below: "ERSResponse": { ...
Hello,I'm trying to clean up our ISE and therefore need to bulk update endpoints to go into identity groups. But when i try to import a CSV file with only: MACAddress,EndPointPolicy,IdentityGroup i get an error saying "MACAddress is invalid for endp...
Hello, I'm having struggles with Windows 10 machines authentication process which is based on client certificates. Before I will elaborate on the errors I observe, I'll share the configuration of components along the way. Windows 10 configuration: ...
Hi, looking for help with configuration per-profile COA in ISE:New connected "ip-phone" is profiled as IP-Phone, but CoA not worked?On the switch side, most likely everything is configured correctly, since if I send CoA from ISE > Live Sessions it wo...
