Hi guys, Does anybody knows practical difference between:1. radius-server attribute 31 send nas-port-detailand2. radius-server attribute 31 send nas-port-detail mac-only Am I going to have some difference in ISE logs between those two commands? Thank...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Radius: the order of radius group
@Example of the command\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\aaa gorup server radius TestAserver name AAAAAaaa gorup server radius TestBserver name BBBBBaaa gorup server radi...
Resolved! ISE Quarantine Alerts
Hi, We are using Cisco ISE for device profiling (corporate machines, printers, phones, video conferencing units). I would like to know if there is a mechanism for ISE to generate and send an alert if a device is moved to Quarantine? Thanks,Obaid
Hello I have had my initial play with ISE 3.0 and ROPC integration to AzureAD. I setup my EAP-TTLS supplicant to perform PAP-ASCII authentication against a user account in Azure. It was all going quite well until I realised that the authentication ...
Hi all, I am trying to find the Stage option when adding a Network Device, however I can not see it in the GUI of SIE 3.0 The Stage: Monitoring option is what I am looking for. Any Idea if it was removed to another concept, as in previous version, i...
Resolved! ISE legacy cipher suites
Hello team,got the following question from my customer:I'm a little bit confused regarding the legacy SSL cipher settings within Cisco ISE.My question is regarding the settings in the ISE GUI under: Administration > System > Settings / Protocols > Se...
Dear community, I applied dot1x in a supplicant, authenticating via Cisco ISE. Authentication is successful, but whenever I restart the machine, the first authentication takes exactly 30 seconds to finish. The Show authentication session int f0/1 s...
Hi,I am wondering what the reason/purpose is of the reauth timer in the common tasks portion of an authz profile in ISE. I understand it is for keeping the endpoint connecting during re-authentication..is the time configure (in seconds) how long the ...
I found that there are 4 self-signed certifications on the ISE by default.One of them is for SAML, only which of the due can be extended by checking the " Renewal Period" box and enter the TTL. However, as for the other certifications, I can not che...
Hello, I have some questions about FTD and AD user mapping. For example there are some rules in Access Control Policy: If user1 is member of GroupA, then he has access to Server1, if user2 is member of GroupB, then he has access to Server2. But if th...
Hi there, for a customer with a 3rd party VPN solution in place, are there suggestions in how ISE may be able to provide more than just AAA capabilities? Our customer would like for ISE to be able to check for a registry key, AV installed & Windows...
We are using fortigate as our VPN concentrator. We are using Fortiauthenticator for MFA. The flow isUser -> Fortiagate -> Fortiauthenticator (Synced with AD for MFA).Now we have added ISE between this flow.User -> Fortigate - > Cisco ISE (Synced with...
Hi all, Can we authenticate Fortigate VPN users from Cisco ISE & can we do posture check on them? If yes can anyone help me in creating Network Device profile for Fotigate Firewall on cisco ISE & how will the redirection work for users to Client Prov...
Hi Guys, Currently I am migrating my current DHCP server to a new one. During assessment, came up an idea why bring the guest access to the new DHCP server. Usually the users are around 200-500. So here is the network flow. Guests will connect to the...
Hi, We have an old ISE appliance and we would like to decommission that and do the complete wipe.We are unable to use the utility tool which does the factory reset.I see that the command application reset-config ise does the policy database wipe. Wha...
