Hi, we have implemented EAP-FAST with machine (eap-tls) and user authentication (MSCHAP). Secure client 5.0.05040. Everything works fine but one user is reporting that sometimes when he logs in, the secure client shows him error: An authentication er...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
I tried starting KVM from the CIMC panel without using certification.Even after I disabling the browser secure setting, I cannot start KVM.please help me with this problem
HelloWe've successfully enabled the ISE Guest Portal on our WLC, and it works well with PCs until we apply explicit proxy settings. After configuring the proxy, the guest portal no longer appears; instead, the PC tries to access the proxy server, byp...
Guys,I hope you are well. I need help understanding where I'm going wrong in my API lab.I went to ISE, enabled ERS, and created the admin user and to access the API. I followed all the authorization parameters and headers, however, I am receiving ...
I have small ISE cluster - one primary PAN and one primary PSN/MNT in one city and another secondary PAN and secondary PSN?MNT in a different city with much distance between. ISE cluster is running version 2.7.0.356, Installed patches 2,3,5,7,9 all ...
Resolved! Cisco ISE 802.1x with PassiveID
Hi, we have EAP-FAST (machine and user authentication) working. Can we enable passiveid on this ISE to get more information from AD? Is it supported configuration? Won't it cause any trouble since ISE will see the same record for a user from 802.1x a...
We're seeing an issue on our 9200 series switches where we get the message "Method Status List Empty" when trying to authenticate devices either for the first time, or when a switch is restarted. To resolve, "clear authentication sessions" is require...
My organization is working on migration path to Win11 (Entra joined), with hybrid user accounts. According to the below posting, it was mentioned that TEAP (EAP-TLS) is not supported for Computer authentication or EAP-Chaining.Cisco ISE with Microsof...
Hello;As you know, Cisco has released CML 2.7, and along with that, it has introduced several new images like Catalyst 9000v 17.12.01prd9. Base on my personal testing, it is certain that the previous image did not support 802.1X. Has anybody managed ...
Resolved! ISE - Sponsor Approved Guest Access
Hi everyone In all Tutorials, there is the following procedure for Sponsor Approved Guest Access: The Guest register himself -> Sponsor get Notified and approve -> User get his credentials Is there a way to change that?The Guest register himself -> U...
Hi everyone If I configure Self registered Guest Access: Guest Register Himself -> Guest Logs in -> Endpoint gets written in the Endpoint Database Guest User is active for 1 Day. Endpoint purge is every 5 days. Then if the MAC don't change this End...
I've been able to assign a VLAN/DACL from ISE to a 3750X but have lost the ability recently. Trial and error but I'm not sure what I'm missing. Can initiate reauthentication from ISE and watch the client connect again but CoA not assigning the VLAN/D...
Hello all, Recently I upgraded my Cisco 3615 server from ISE 2.7 (Patch 9) to ISE 3.2 (Patch 5). The upgrade went smoothly but I can no longer SSH into the CLI. None of the configurations were changed and I only started having this issue once the upg...
Resolved! 12508 EAP-TLS handshake failed
Hi, We upgraded from 2.7 - 3.0 and then a few weeks ago from 3.0 to 3.1 (for some AzureAD functionality that we require) but since the upgrade we are now seeing devices get rejected from the corporate network with the errors below: Event 5400 Authent...
Hi I have a pair of Cisco SNS-3755-K9, on which im going to run ISE, physically installed for some months ago. Finally i've got the time to work with them, and i'm not able to logon. I've tried all passwords found on google, admin/admin etc... Do any...
