authentication We have recently deployed cert based 802.1x authentication with Microsoft NPS for two stack switch groups ( STACK01 / STACK02 ) . each stack switch group contains 3 switches. But we have identified cert based 802.1x is working as e...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Dear community, I deployed 2x Cisco ISE 3.0 Small VMs. During the process of adding them in a High availability state, ISE2 was found in the deployment tab in the ISE1 Window screen. However, when the process continued to the restart stage as per th...
Hello, I´ve a customer that is currently using a legacy ISE VM, R-ISE-VM-K9= and L-ISE-BSE-500= The customer wanted to expand the amount of licenses to 600 from 500 (add 100) Is it possible to use the replacement SKU ie L-ISE-BSE-PLIC to add another...
Hi All, We have a Cisco ISE in our deployment running on version 2.4 and patch 13, while joining AD to ISE we are getting the below attached error. Please let me know how this can be resolved.
Resolved! Cisco ISE 2.4 EndPoint API Creation
Hi Everyone, I'm trying to get some clarification on the ISE REST API. Right now, if I import an endpoint from CSV, then use the API to GET the endpoint I see the following. { "ERSEndPoint": { "id": "someID", "name": "11:11:11:11...
Resolved! ISE 2.3/Query about/DevicePortal
Hello all! I have a doubt about the functionality of the mydevice portal of ISE, i like to know if we have a deployment primary and secondary node, we access only to the portal from of primary node or we can access to the portal on the secondary nod...
Hello Team please help me I installed CISCO ISE 3.0 on Hyper-V with 24GB memory and 6 Cores CPU All the others functionalties is ok But i am unable to configure a policy because it is not display on the GUI. The page just charge but nothing appears.(...
Hellowhen I connect from the office I cannot connect to the network ... it always asks me for username and password without authenticating me. (in wired and wireless)Unlike at home, I can access the VPN without any problems.So I suppose the problem i...
Resolved! ISE integration with AD fails
Hi All,I am trying to join the ISE with our AD with no success, below the error logged in the ISE: Error Description: ERROR ,140321144960768,Failed to get lsass status -> error = 40074, symbol = LW_ERROR_NOT_JOINED_TO_AD, client pid = 27820,lsass/ser...
Having an issue with several hosts. Periodically, they will try to reference their host mac address, instead of using the computer’s AD account. I am reviewing the radius logs, and comparing a failed authorization attempt and a successful one. On the...
Dear community, I have a small VM license for Cisco ISE 3.0 which as documented requires 32GB RAM. Based on documentation, it is stated that for ISE deployment you can reserve starting from 600 to 2TB Disk. So I decided to use 1200GB OVA file which ...
Resolved! ISE Licensing Issue
Hello all. I have a customer where they have 5000 Base licenses and the report is saying they are 400 over subscribed. The customer is Adamant that they don't have that many connections so wants to know where the licenses are being used? They also ha...
Resolved! ISE Profiling Use cases.
Hi Everyone, We are planning to deploy the NAC (profiling). So before that we want to know the best and known use cases of ISE Profiling feature. Regards,Ishwar
Resolved! WLC BDRL with AAA from ISE
Hi All, Can I double check that the BDRL advance attribute values that get returned by ISE are now different in the IOS-XE 9800 WLC than previously in AireOS WLCs? AireOS BDRL with ISEAire-Real-Time-Bandwidth-Average-UpStream-Contract = 1024Aire-Dat...
Our current network does not have remediation VLANs set up and the only way to get PCs authorized is to allow it on the network so technicians can posture it so it authenticates. I'm trying to find guidance on how to set the remediation VLANs that ...
