I have two virtual ISE nodes (PAN or MNT), one has a small VM license (12g ram, 12 core) the other one has a medium VM license (16g ram, 16 core). Can I configure HA pair? ( I know best practice is to have equivalent hardware resource)
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! what items exactly to backup for ISE
Hi can I verify the below are all I need to backup ?1. Configuration Backup2. Operational Backup3. ISE Certificates how about those IP address I configure for the interfaces in the initial setup, are they part of item 1 - Config Backup or do I need t...
Hello I am sitting with a 24GB config backup file and there are only 110,000 endpoints in the database. I don't believe that 24 GB should be the expected size of the database with this many endpoints, am I right? If ISE supports 2 million endpoint...
Resolved! Cisco ISE 2.4 support for LAN LITE IOS
Hello All, I am in the process of implementing ISE 2.4 for one customer, and I checked the IOS versions of the existing access switches for compatibility. I have found a few c2960 switches with LAN Lite image. As far as I know that image is not rec...
Hi Apologies in advance this is probably trivial but I'm learning. I'm working on a Cisco lab (packet tracer) and I have been tasked with creating an ACL with the following parameters : I am struggling to grasp the concept of what I should use where...
i have the firepower 1120 firewall, i have a network in DMZ zone. i natted my server and when i create block access rule for ping, this rule does not works. also, i noticed that my firewall allow all to my server, all open ports are allowed
I have deployed a Cisco ISE Posture solution, after completing all the required steps, i found that the Posture check work only when a user disconnect and start a new session (Windows user in my case), i just want to ask for any solution to make the ...
FYI : https://www.securew2.com/blog/android-11-server-certificate-validation-error-solution/ M.
Hi there!We are facing some issues when trying to implement 802.1X on our Cisco IP phones.The authentication of the phone is successful, an authentication session is created on the switch, everything seems fine.Unfortunetaly the phone isn't able to r...
Resolved! ISE 3.0 redundancy remote location
I have two ISE servers at my primary location but I also have two new ISE servers that will be deployed at another remote location as disaster recovery. I would like information to be shared across all four ISE servers in case of a failure at the pri...
We have phones that are getting rejected with 802.1z eap-tls after renewing the device's certificate. the old one expired and we replace it with a new one from the same internal CA that is trusted by our ISE. All phones are not working and ISE logs...
Resolved! Certificate expiration in ISE
Hi Anyone can explain the four certificate functions in the below picture? If expiring, what would happen? Thank you
Resolved! cisco anyconnect upgrade
Hello Team, I'd like to know the recommanded version of cisco any connect NAM for CISCO ISE . I find Version 4.8, 4.9, 4.10 thanks,
In AAA configuration, I can create a new method list to be used for RADIUS:aaa authentication dot1x TEST_AUTH group ISEaaa authorization network TEST_AUTHZ group ISEaaa accounting dot1x TEST_ACC start-stop group ISE instead of the default one:aaa aut...
Hi, Our customer use ISE 2.7 and does not want local users to use consecutive letters in their passwords. Is it possible to restrict this? Regards,
