Network Access Control

wired CWA guest portal page not loading

we have a requirement to offer only internet access to non domain computers connected to wired network.so we are using CWA guest portal to authenticate those users against AD and allow Internet only through dACL.we configured 2 authorization profiles...

Resolved! ISE 3.1 API nonce validation failed

Hi all, I want to add new Endpoints via API. I'm using this endpoint: POST /ers/config/endpointThe system needs a X-CSRF-TOKEN header. I get this Token before sending the POST Request via GET /ers/config/endpoint with the following headers: '...

Cisco DNAC, ISE, and WLC Deployment without SDA

We're about to deploy Cisco DNAC, ISE, and WLC across four sites, and we would love to tap into the collective knowledge of this amazing community to gather suggestions and tips for enhancing our architecture.Here's a brief overview of our deployment...

Cisco Secure ACS integration issue on Cisco router

Good Day,Please help me with my Cisco ACS integration issue. I already configured ACS, but when im trying to configure AAA on cisco router and try to login to the router remotely using telnet, i can't login with the credentials that i created on ACS,...

cisco catalyst 2960x is it IBNS 2.0 compatible?

im having problems creating classs-map, policy-map and im getting fo example: Command deprecated (authentication event fail action next-method ) - use cpl config so is ther something special that i dont know or is imposible to use IBNS 2.0 with this ...

Resolved! ISE 2.7 Clustering Issue

Hi Team, I have a total of 4 ISE nodes on a VM medium size. Previously, it was on 2.3 where we are facing multiple issues. Recently I migrated that server with the fresh installation on version 2.7 patch 9 on a newly created VM host using ISO image. ...

Resolved! EAP-TLS Computer Authetication Failing

Hi, I have configured ise to accept both machine and user certificate authentications and mab device management.The user and mab certificate authentications are working properly, so both the ISE, switch and supplicant side configuration of the pc are...

802.1x Fails with some 8841 phones and not others.

Cisco Unified CM AdministrationSystem version: 12.5.1.13900-152Why would 802.1x keep some phones from registering with call manager?I connect Cisco 8841 telephones to Merakis where 802.1x is enabled on the phone and on the Meraki.Authentication works...

Resolved! What Ise Radius template to use?

Hello, i'm deploying an Ise environment and i'm guessing what Ise Radius template to configure on the switch.I saw a lot of different configuration commands but can't understand where to retrieve them and what's the differences.Is the following port ...

Router/Switch 2 Factor authentication using ISE/TACACS and Safenet/Gemalto token RADIUS service

Hi, I have been asked to look into implementing two factor authentication for device logon to our routers/switches/ASA firewalls using ISE with Safenet (Gemalto) providing the external RADIUS token services. Is this scenario actually possible ? The d...

Resolved! Import Devices into My Devices portal

We are looking to upgrade to ISE 3.1 and we use the My Devices portal for our employees to register their personal devices. Does anyone know if it is possible to import devices and have those devices show up in the users My Device portal? Users log ...

Resolved! MAC- Based Authentication in ISE which license & methods are in use??

I need to know that Can ISE supported MAC-based authentication as per the below request: - If i want to achieve mac based authentication in essential licenses if yes then can I do it? - if i want to achieve mac based authentication in the Advantage l...

Resolved! Cisco ISE 3.1 patch 7 user custom attribute - admin user error

Hi, If i define an user custom attribute and i go and create or edit an admin user i'm getting error: xwt.widget.repeater.DataRepeater._fetchItem(). A record(record id='adminCustAttrRepeater') in your data store does not contain a field named 'value'...

Resolved! Using SGT, which SGT should I use for Internet access

Hi all;Suppose I want to enforce Internet access on ASA based on TrustSec SGTs. In this scenario, which SGT IP mapping I have to create so creating ASA access control list based on that to manage Internet access?Thanks

Resolved! WAKE on LAN with dot1x

Hi all,iam trying to send wake on lan packets from central sccm server,i have edge switches cat9300i configured access-session control-direction inon all ports because i have dot1x configuredon closed ports and open ports, some machines wake up and s...

Network Access Control

Forum Posts

wired CWA guest portal page not loading

Resolved! ISE 3.1 API nonce validation failed

Cisco DNAC, ISE, and WLC Deployment without SDA

Cisco Secure ACS integration issue on Cisco router

cisco catalyst 2960x is it IBNS 2.0 compatible?

Resolved! ISE 2.7 Clustering Issue

Resolved! EAP-TLS Computer Authetication Failing

802.1x Fails with some 8841 phones and not others.

Resolved! What Ise Radius template to use?

Router/Switch 2 Factor authentication using ISE/TACACS and Safenet/Gemalto token RADIUS service

Resolved! Import Devices into My Devices portal

Resolved! MAC- Based Authentication in ISE which license & methods are in use??

Resolved! Cisco ISE 3.1 patch 7 user custom attribute - admin user error

Resolved! Using SGT, which SGT should I use for Internet access

Resolved! WAKE on LAN with dot1x

Cisco ISE backup creation terminated

Bulk Update Fails for customAttributes - Is it supported?

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

can i USE 2 CISCO ISE posture policy in same time with 2 Anti malware

ISE 3.5 requests for SMB Version 2 from Active Directory

SSL VPN FOrtigate with Cisco ISE Posture

Certificate Services OCSP Responder nearly expired

ISE databases - which one has the endpoints?

port-based network access control for Data Center - 802.1x (yes or no)