Hi We are using ISE 2.4 and are using enforcement (closed) mode at our main office. It is working fine on all our switch stacks (3850 version 16.6.6). I take the same configuration and apply it to another location using the same ISE appliance, same s...
Forum Posts
Hello guys, I'm trying to configure 802.1x on my LAB environment on a old catalyst 3650 to connect to ISE. Switch Ports Model SW Version SW Image------ ----- ----- ---------- ----------* 1 26 WS...
Getting the error below when using PassiveID and trying to add Windows 2012R2 DC:"The connection was tested on 'isemain.cyber.lab' PassiveID active node. Connection to 'maindc' failed.Unable to connect to the machine, please check the DC state"Test u...
Hello everyone,Quick question, we are in the process of shutting down our ACS along with the SSID that are still using them, our team would like to create a splash page once the user authenticates with 802.1x, I created the auth profile on the ACS, i...
Resolved! ISE upgrade from 2.7 to 3 - Mixed
Hello, I have two PAN servers and two PSN servers (one PSN in a DMZ) running ISE 2.7 that I'm keen to upgrade to 3. I've been reading the docs and see the recommended method is to create new VMs (backup and restore) and join them to the cluster, that...
Dear community, Hope all good at your side. I am working on the configuration of Cisco ISE 3.0 802.1x in a project and during the process I am facing an issue with Authorization.Cisco ISE shows: 1 Misconfigured Supplicant. The details of this Misc...
Hello,We are planning to migrate to use PEAP and EAP-TLS as authentication method.We have Root CA and several intermediate CA(first and second) all on Microsoft.We've imported Root CA and intermediate CA(first) Certificates in Trusted Certificates on...
Team,We have been looking at the Cisco ISE as a NAC solution and so far have tested use cases using 802.1x authentication. The authentication being certificate based. While this works great my intention is to avoid touching the NIC adapter setting on...
ISE 2.2 patch 17Is there a way to automatically CC the sponsors email address in the account creation notification email that is sent to the guest? Currently guests are getting the notification email with their access details (the from email address ...
We are only able to duplicate a user if the identity list is unfiltered. When we filter the list based on any criteria the duplicate function is disabled. Is it possible to filter the list based on user identity group and then duplicate a user from ...
Resolved! ISE 2.7, 2960 and pc behind cisco phone
Hi,I prepared a switch 2960 version 15.0(2) SE6 and a phone 7940 connected to this switch, and all work fine with MAB ,after that I connect a win 10 pc to the phone using 802.1x and the switch complain about security violation and automatically shutd...
Dear All, As we do network devices ( Routers + Switches ) Administration using TACACS my requirement to do the same for servers like for Server 1 we want to create 3 sets of users1> Admin2> Semi-admin with limited access3> Read only monitoring users ...
Whats causing this and what may be best solution
Resolved! CIsco ISE upgrade decrease in node size
Has anyone upgraded from a 4 node ISE cluster with Primary and secondary Admin/Mnt nodes and two PSN nodes to the following 2 node cluster with primary/secondary Admin/Mnt/PSN persona Is the best way to do a fresh build and config or will backup and ...
Resolved! Cisco ISE Upgrade
Hello friends, I am trying to create new node with latest version of ISE and restore backup from old deployment.Do I need to restore backuped config to psns and secondary admin node before registering in new deployment?Or is that enough restoring bac...
