Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! Bring ISE01 back into service.
Hello, I have a customer that has a 2-node ISE deployment on ISE 3.1, Patch 3. These are both virtual appliances. ISE01 crashed due to CPU, memory and no disk space on VMWare. ISE01 didn't fail over to ISE02. ISE01 was powered down and ISE02 was pr...
Hi All I try to make external identity ODBC integration with Oracle and ISE. and we have a table like following. According to this table i need to get framed-ip-address as attribute for return to the atuhenticated users. how it should be fetch attrib...
Hello, so i have the following problem i have an Stealthwatch and ISE integration at the moment and is working, i can see the 802.1x users on ise and stealthwatch with the ip and mac address, in that way everything is working as spected but when i do...
We are trying to use a custom set of letters for the guest policy within ISE to restrict "i's, l's" and other characters that users have issues distinguishing. We simply but abcdef in the Custom field but when we generated accounts it sill had lette...
We are using ISE 3.1 Patch 5 with JAMF integration. Using EAP-TLS authentication. ADCS for the PKI. Wireless works consistently. Wired is very hit and miss... much more miss then hit. The external MDM setup in ISE is set for SAN URI - GUID. The Legac...
I am trying to upgrade my ISE 3.0 environment to ISE 3.2 patch-2 with ZERO downtime and I can rollback with zero downtime should I run into any issues. I have a nodes SNS-3655 clusters:ISE1: Primary Admin/Primary MNTISE2: Secondary Admin/Secondary M...
Hi,After running the cts role-based enforcement vlan-list 200 in an access switch, the devices can no longer reach its gateway (SVI in a distribution switch) Without reachability to the gateway, outside connectivity is also lost.The uplink between th...
Trying to configure a device admin policy set for TACACS plus, using RSA to authenticate. I can get the Authentication to work and I see ISE talking to RSA in the tacacs logs and authenticating ok, however the authorization fails and says there is n...
I upgraded cisco switch 2960x to 9300 and copied all configurations from 2960x to 9300 and I didn't have any syntax errors, however the hosts cannot be authenticated by ISE when they try to access the Internet. On the intranet everything is fine. I a...
I have an international customer that is doing a self-registered sponsor approval required guest portal for their AsiaPac region. They have PSNs in the different countries in the region and want to customize the guest portal and sponsor portal per r...
Hi ALLWe ae planning to change the domain name on ISE with setup running on two ISE nodes. We have ISE nodes names as ise1.xyzindia.xyz.org and ise2.xyzindia.xyz.org . We are changing it to ise1.xyz.org and ise2.xyz.org. Trying to generate new CSR w...
Resolved! Authentication Open for MAB
Hi all;Does "authentication open" work for MAB, too?Thanks
Resolved! 5400 authentication failed with 12948
Hello !! We recently came across an error with ISE and some Android devices. The failure reason is: 12948 supplicant sent unexpected unencrypted tls handshake message instead of tls application data in peap protocol. verify that supplicant is configu...
Hello, everyone,I am using Cisco ISE 2.7 in my infrastructure to control access to the network, and I have policies set up for MAB and 802.1x authentication. I want to enable the ability to block access to the network for PCs deemed suspicious. The e...
Resolved! EAP-SIM, EAP-AKA, EPS-AKA support
Hi all, I saw a conversation about this from a few years ago. Can someone at Cisco please confirm if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so. If not, do enterprises still have to rely on CPAR, and how would that int...
