Hi Team , Do we use ISE authentication for users who access Servers ? Like we authorize users who access Network devices like Cisco switch , WLC , Infoblox etc ..Similarly can we apply policy or profiles for users who access Servers ? (windows / Li...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hello,Has anyone seen an issue on ISE 3.0 where the PSN nodes are growing CPU and authentication latency over time? CPU has been spiking on all PSNs. These have 24 vCPUs, 96GB RAM, and 310 GB disks. I also have the CPU reservation set for 24,000 MHZ....
Hi, folks. Has anyone run ISE with more than one Azure MDM connection (more than one tenant) successfully ?? A customer has several BusinessAreaUnits, each of them has its own MS Azure tenant ..... ISE is the central authen/autho platform and has MDM...
Hello,As you see a title, I have to enter MAC address before issuing Server Certificate in Certificate Provisioning. However I don`t know what type of MAC address I have to enter.Is it MAC address of virtual server? or of physical server?Do I need to...
Hi all Basically the title says it all. Does ISE 3.0 Patch 5 still require the Log4j Hotfix? I'm asking because the release notes state CSCwa47133 as fixed, but neither the hotfix notes nor the bug notes have been updated in regards to Patch 5. T...
Hello, We are in the process of choosing the right ISE software version that is compatible/supported for ISE wired 802.1x deployment for our NAD in the LAN. Below are the NAD we have ,ModelSoftware VersionWS-C4510R+E (SUP7-E)15.2(2)E4WS-C3750X-48PF-S...
Resolved! Cisco ISE 3.1 patch2 installation
Hi guys, Anyone installed patch2 for ISE 3.1?Any issues after the patch installation? I ran into a reddit thread stating log4j hotfix should be removed before applying patch2, but I cannot find anything in Cisco documentation regarding this. I am cur...
Hi all,taking advantage of cisco prime I issued by mistake on several switches the folowing command: radius-server attribute 32 include-in-access-req Strangely enough now I'm unable to remove the command on all ios switch models, I tried the obvious ...
Resolved! Remote destok Dynamic vlan
I have this issue regarding remote desktop RDP. When a user tries to connect via RDP to Windows with an 8021.x configuration, I can not access via remote. If I put on the port the specific vlan (no vlan default ) , the user was able to connect.My sce...
Resolved! Cisco ISE SFTP backup issue
Hi,We try to run a backup from an ISE v3.0p5 with an SFTP server.When I try to add the SFTP key with "crypto host_key add host x.x.x.x", the key is not fetched. When I try to ssh to the SFTP server, I get the following: ise-01/admin# ssh x.x.x.x back...
Resolved! SSH "get all endpoint" report's content
Hello, I'm currently working on automating a report of the endpoint's details, after trying with the API (wich was not the best solution), i switch to using a report that you can generate by connecting directly to ISE in SSH following the instruction...
Dear All,I am beginner. I didn't understand 802.1x wired authentication with certification.Whenever we are using machine authentication or user authentication with cert,we need to install root cert and user cert or root cert and machine cert in clien...
Resolved! Common Name (CN) in certificate in ISE
Hello.I want to issue Client certificate for employee in ISEEach employee have to import Client Certificate into there Windows/Mac PC,but I can`t enter employee's name and this error message is displayed. The image is like this.-------MikeDaveBobSmit...
After i have set Session-Timeout and Termination-Action in Advanced Attributes Settings and save it,they move to Common Tasks after i click into the Profile again, My question is how can I remove them in Common Tasks, it seems i have to set the value...
Resolved! feature dot1x doesn't exist
Trying to configure a Nexus 9k as an access switch in line with our LAN standards - not it's general intended purpose I know. Looked up the configuration guide for the various things since IOS doesn't quite translate over. For 802.1x you start with ...
