Hello, When ISE 3.1 was first released I tested ZTP on vSphere using the .iso ISE installer method. At that time, I was unable to mount two .iso/.img files, so I used the Advanced Attributes option (BASE64 encoded) ZTP config config option - that wor...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Fetch OU from AD to ISE 3.1
Hello, ISE can only fetch the groups under AD. Is there any way ISE can see the OU from the AD? Thanks,
Resolved! ISE - License for only using Radius
Hi, Quick question Do I need a license to use Cisco ISE for only Radius authentication with Meraki Wi-Fi devices?
Hello All,ISE v2.7I just uploaded a new wildcard DigiCert certificate to ISE with the Role of Guest Portal. I uploaded the new wildcard cert + the private key that my manager gave me. I checked the Allow wildcard certs checkbox and everything appeare...
Resolved! ISE 2.7 - DHCP Probe not working
Hi,I am attempting to discover laptops connecting to a VPN endpoint that terminates on an F5 Load balancer using the DHCP Probe, but none of the devices get added as ISE Endpoints!This was my approach:I added the ISE policy nodes as DHCP servers (Hel...
Hello all,We've been experiencing random authentication failures after a scheduled weekly reboot script runs at 3 am EST on Sunday mornings. The Windows 10 clients are using the native supplicant are a combination of Lenovo small form factor desktops...
Hi, we have a customer which is using a ISE-3315 Hardware appliance running 1.1.4.218 Patch 1. He needed to upgrade to 1.2 Patch 2 to support iOS7. There is no secondary appliance so this is a standalone deployment. We did the upgrade according to Ci...
Resolved! 802.1x and widnows domain login
I want to clarify the 802.1x and windows domain login process. configured EAP-MD5 with CSACS 3.3.1 beta, W2K, 3550 switch.1) what's first? windows domain login or 802.1x?2) if domain login first, how can I login through the 802.1x enabled switch port...
Hii am deploying a NAC device in my envionment using a third party nac solutionPlease can the sg350 switch do vlan assignment, in such a way that when someone connects to a port he or she is redirected to a compliance port before accepted into the co...
Hi guys,I'm using Change of Authorization (CoA) Re-authenticate Cisco:cisco-av-pair=subscriber:command=reauthenticate, it works fine on pap and chap, but can't become online again on eap-md5, peap, ttls,tls.The traffic capture file contain the sucess...
Hi I have a requirement to provide a Hot Spot AUP page and allow guests to browse internet for 1 hour. After 1 hour they need to see the AUP again. I don't know where this is defined, but I have to assume that LastAUPAcceptanceHours = ROUND(Curr...
Hi,I'am trying to integrate ISE 3.1 with RSA Authentication Manger v8.3The idea is that the administrator connects to a given cisco router/switch, the net device for a lab (cisco router) has aaa configured with a TACACS+ server whose IP is pointing t...
Version 3.1.0.518 Patch 3, MnT currently running on the same node as the PAN Cisco ISE live logs missing authentication for secondary PAN node. As a result, we cannot see any device in the live logs or live sessions that authenticate via the secondar...
Resolved! Do you need Cisco ISE to apply SGT ?
Hi AllDo you need Cisco ISE to apply SGTs to switches? or could you get other NAC software to apply them via api's etc ?Could you apply an SGT manually ?cheers
Hi! I have some problem with dynamic authorization. The problem involved is similar to CSCvi28819. But there are some differences. First of all, I have no PxGrid. I have Node Group of two Policy Service Servers. Passive ID with Active Directory co...
