Hi all,taking advantage of cisco prime I issued by mistake on several switches the folowing command: radius-server attribute 32 include-in-access-req Strangely enough now I'm unable to remove the command on all ios switch models, I tried the obvious ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! Remote destok Dynamic vlan
I have this issue regarding remote desktop RDP. When a user tries to connect via RDP to Windows with an 8021.x configuration, I can not access via remote. If I put on the port the specific vlan (no vlan default ) , the user was able to connect.My sce...
Resolved! Cisco ISE SFTP backup issue
Hi,We try to run a backup from an ISE v3.0p5 with an SFTP server.When I try to add the SFTP key with "crypto host_key add host x.x.x.x", the key is not fetched. When I try to ssh to the SFTP server, I get the following: ise-01/admin# ssh x.x.x.x back...
Resolved! SSH "get all endpoint" report's content
Hello, I'm currently working on automating a report of the endpoint's details, after trying with the API (wich was not the best solution), i switch to using a report that you can generate by connecting directly to ISE in SSH following the instruction...
Dear All,I am beginner. I didn't understand 802.1x wired authentication with certification.Whenever we are using machine authentication or user authentication with cert,we need to install root cert and user cert or root cert and machine cert in clien...
Resolved! Common Name (CN) in certificate in ISE
Hello.I want to issue Client certificate for employee in ISEEach employee have to import Client Certificate into there Windows/Mac PC,but I can`t enter employee's name and this error message is displayed. The image is like this.-------MikeDaveBobSmit...
After i have set Session-Timeout and Termination-Action in Advanced Attributes Settings and save it,they move to Common Tasks after i click into the Profile again, My question is how can I remove them in Common Tasks, it seems i have to set the value...
Resolved! feature dot1x doesn't exist
Trying to configure a Nexus 9k as an access switch in line with our LAN standards - not it's general intended purpose I know. Looked up the configuration guide for the various things since IOS doesn't quite translate over. For 802.1x you start with ...
We are planning to perform the ACS 5.8 to ISE 2.4 migration. In the below documentation, pre-requisite is to enable the Policy set mode as per the below mentioned path. choose Administration >System > Settings > Policy Sets to enable the policy sets....
Resolved! Guest authentication in a Secondary node
Hello,As you see a title, Is it possible to authenticate Guest account in a Secondary node ?I use ISE in a Distributed Environment (Primary, Secondary).----------------------●ISE version : 2.7----------------------When Primary node is down, Secondary...
Resolved! Problem with Guest Portal ISE
Dear Support,Please we have a problem with the guest portal, when we connect to the Guest wifi the guest portal doesn't show up, and also the redirection link takes time to redirect into the link of the guest portal.You find attached the screenshots ...
Resolved! Cisco ISE Authorization Profile?
I've a couple of devices which are manually added to Cisco ISE (version 2.3.0.298).They are statically assigned to identity group "MAB-VLAN199".All the devices are matched to authorization profile "AUTH-VLAN199".But one device is shown in the ISE log...
Hi my name is Ivan.I will configure cisco ise v3.1 for tacacs service with rsa authentication manager for multifactor for tacacs services.My question is: Do i need license essentials morever of device administration license?Rsa should work with ise l...
Hi,I am using MAB on a port together with the authentication violation shutdown command, but when I connect a device with a MAC that does not belong to any group, Cisco ISE denies access, but the port on the switch remains connected.If I do a show in...
I want to simplify our management policies in ISE for the devices. For management policies I mean the rules that allow access (cli, http, console) to the devices. We have dozen of different device types (routers, switches, firewalls, ...) and today ...
