Hi,Is there a way for ISE to work similar to C9800 controller in terms of the VLAN assignment for specific sites? I'm trying to prepare the global policies as unified as possible and I wonder if it's doable to assign different VLAN ID's based on some...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
I have an issue where even though my SGTs and SGACL appear to be working correctly, traffic is not being enforced based on the SGACL. While working with TAC, they shared the following note, but haven't yet been able to expand on this statement. Can a...
Folks, we use ISE PassiveID identity sharing from ISE to FMC for uset-to-ipaddress resolution vis pxGrid. There is also machine dot1x authentication using the sam ISE as Radius/AAA. It happens that username-to-ipaddress event from ISE PassiveID is so...
Hello,Is it possible to point traffic to a specific PSN in a deployment for specific endpoint profile.e.gWindows machine -> PSN01Linux machine -> PSN02
Resolved! REST API guest accounts locks on expiry
Following an upgrade to ISE 3.1 patch 4 I am getting complaints that a self service external guest portal utilizing REST API for the creation and management of guest accounts stops working if the account expires. Prior to the upgrade the user could s...
Resolved! Cisco ISE SXP
We are currently directly pointing almost all our network devices back to ISE for SXP. We are using a device to ISE SXP peer connection. We are at our max "200" SXP peer limit. Does anyone know if Instead of making SXP peer connection directly to ISE...
Hello all, hoping I can get some help with a new setup here. I've been asked by administration to set up ISE with EAP chaining, in a fairly simple setup, to restrict wireless network access to domain only devices. I'm not generally a network admin ...
Resolved! ISE Portal: change guest flow
Utilizing ISE 3.1 and using the portals for CWA (centralized web auth).Does anybody know if it is possible to change the guest flow in the portal? This is what I want to achieve:Default landing page should be the "self registration" page, not the "lo...
Resolved! ISE 3.2 and AzureAD - groups retrieve
Hi,I'm trying to connect ISE 3.2 to AzureAD, the connection itself worked fine (following the guide: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216182-configure-ise-3-0-rest-id-with-azure-act.html) but now I'm not ab...
Hello, I have configured ISE 3.0 to send an email to a guest whose account is about to expire. I am unable to change the image ("ISE icon" shown below) to a custom image of my own choosing. There is an old Community posting about this dating back...
Resolved! Adding Device Group via Rest API
I'm trying to add a simple Network device group and I'm getting an error on the name saying it is invalid.ABC-DEF - Group NameAPI POST - /ers/config/networkdevicegroupBody -{"NetworkDeviceGroup": {"name": "Location#All Locations#ABC-DEF","othername":...
Resolved! ISE on VMWare - CPU Requirements
Hi, I have installed ISE 2.7 on a VMWare environment.The specifications require a minimum of 16 CPUs so I configured the VM to have 4 Sockets each with 4 Cores, a total of 16 vCPUs. However, if I type 'show inventory' the ISE sees only 4 CPUs. Bottom...
Resolved! Cisco ISE AWS upgrade 3.1 -> 3.2
Hello,I'm interested has someone already done this and what would be the best way to approach this. We are running cloud native AWS deployment and according to docs this deployment cannot be upgraded but needs to be redeployed and configuration resto...
Dears, I know Anyconnect doesn't support yet posture on windows 10 with ARM64. Any roadmap info about? thanks Mirko
