Network Access Control

Does anyone have any input on the process of renewing the cert that is used for EAP/Admin services in ISE? I am assuming we just create a new CSR and list all of the nodes in the SAN field and have a signed by our PKI CA and import it? I am also wond...

Hi,    Working on a use case as follows: UserA - 192.168.1.1 (First Login) UserA - 192.168.1.2 (Second Login) UserA login into 192.168.1.1 after login at 192.168.1.1. Based on ISE passiveID, only first IP is registered in User-IP mapping and shared v...

What is the answer of Cisco to the following situation/need:   A Windows client was offline for one month. During this month a lot of critical patches were roll out by SCCM server. (The client does not know it of course because it was offline) How do...

I've a new ISE Integration, I've implemented captive portal for wireless and wired guests, for Wireless all is working perfectFor Wired I can see that ISE put the url captive on the interface of the switch but from the laptop of windows machine, I'm ...

Hello,   I'm working on a project in order to deploy ISEs to gain more security. I would like to know what ise the stable OS version. Is it recommended to install version 3.1 or version 3.0? These ISEs will be deploy in production environnement.   Si...

I am trying to ISE a WS-C3560V2-48PS switch on  SW Version 15.0(2)SE1: After applying my configuration, I get the following result:#show authentication sessions interface fastEthernet 0/1Interface: FastEthernet0/1MAC Address: 0cxx.25a7.867fIP Address...

Dear genius. i am trying to restrict shutdown command under fastethernet interfaces of switch but want to allow shutdown command under gig interfaces. How will i achieve this?is this possible or not? please tell me Grant, Command and arguments for my...

Hey, how can i change the 802.1x Version at devices ? We will change to 2020 ... soon.  

  Hi Team,   Our team have been using LDAP instead of Active Directory They are evaluating ISE but, using ISE with LDAP is not getting dot1x authentication ISE is getting logs for the switch 2960-x and tested the MAB authentication  What is the reaso...

Hi Team,   Our team have been using LDAP and RADIUS using  MSCHAPv2 protocol They are evaluating ISE but, using ISE with LDAP is not getting dot1x authentication ISE is getting logs for the switch 2960-x and tested the MAB authentication  What is the...

Can someone point me to a RADIUS or AAA lab, with switch flex-connect, or a topology where I set up the nodes and server myself? I had one before where I set up Ubuntu freeRADIUS,  I am looking for something where I can get hands on practice either s...