The native supplicant is configured for PEAP and MSCHAPV2. the authentication method is user or computer authentication. verify server identity is also checked and we use ISE self signed certificate. it authentication successfully at first but after ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hello, On a ongoing setup we are using eap-tls authentication with account validation against AD. We have our own CA (microsoft based). ISE version 1.2.1 patch 1.With windows machines all is working well. We are using computer authentication only.Now...
Resolved! Cisco ISE and Intel AMT $iME
Hello folks, We've got an issue using dot1x on 9300's that when a PC goes into sleep mode, the Intel NIC spits out "domain\hostname$iME" as a radius hostname, which fails auth. Is there a trick to getting these things to authenticate? I've had a look...
Resolved! ISE and AD synchronization
Hello everybody!I would like to know how long it takes the ISE to synchronize with the AD after a change has been made on the AD.Is there a default parameter set on the ISE that forces it to synchronize with the AD?Is it possible to change it? Thanks...
Dear All, We have deployed ISE 3.0 and using posturing and profiling. Currently, we are facing an issue where the customer is using external connector in Lenovo laptops as those laptops don't have RJ45 connectors.Issue is, when switchport is connecte...
Good morning,I am attempting to setup our Palo Alto Firewalls to use certificate authentication by sending our login information to ISE using radius and having ISE lookup the identity in active directory as an external authentication source. I reali...
I have a client who has mistakenly created loop on cisco switch C3850-48P by connecting another cable to the switch from cisco IP phone 7811 model. This should ideally be detected by switch and the ports should be blocked since there are BPDU guard c...
For a while now we have been experiencing an issue where most of our iOS devices are unable to connect back to our 802.1x SSID once woken from sleep. 1) iPad will be connected the SSID and able to connect to the internet, Meraki Dashboard and Cisco ...
Hello experts, is there a possibility to influence the length/number of certificates for server validation in Cisco-ISE?My tests with Cisco-ISE ver 2.7 and 3.1 have shown that Cisco-ISE always sends out the full chain of trust in the TLS "Hello Serve...
Resolved! Secondary ISE auth requests
Can secondary ISE serve any authentication requests? Current setup is primary ISE at DC and secondary ISE at DR. Testing anyconnect VPN via DR. Since DR ISE is in a secondary role, can it server the authentication requests from DR ASA.
Resolved! ISE - anyconnect 802.1x
any documents for doing 802.1x authentication in ISE for AnyConnect VPN clients.
Hello,We will switch from a VM cluster in version 2.6 to new VMs in version 3.1 (in // of the old one). For this we will transform the existing VMM licenses to VMC and Base/plus to Essentials/Advantage (as indicated on the migration guide).It seems t...
When an endpoint tries to authenticate with ISE it fails. But the logs for this authentication failure event are not present in ISE live log or Reports. Is there any solution for this?
Resolved! Cisco Smart License in version 2.7
We have 3515 Cisco ise running on version 2.7 if we order new smart premium license can we install this new license in existing ISE version or do we need to upgrade it to version 3.0
Hello experts, is there a possibility to influence the length/number of certificates for server validation in Cisco-ISE?My tests with Cisco-ISE ver 2.7 and 3.1 have shown that Cisco-ISE always sends out the full chain of trust in the TLS "Hello Serve...
