Hello everyone,I am trying to configure downloadable ACL through a 3rd party radius server (MS NPS).At this point I understood this was done through the cisco-av-pair attribute.However I have found little resources as to the configuration i need to d...
Recently we had deployed ISE server for authentication and Authorization purpose and there was many requirement by the client which was fulfilled, now the last requirement by them is to do multiple user login on same machine, due to these requirement...
Question: If a VoIP phone connects to a switch that has 'authenticaion open' command on the interface, and the switchport access vlan 10 is set, as well as, the switchport voice vlan 20. Would the phone still have access to the voice vlan? The phone ...
1. I have tried 'acs stop' and 'acs start', it didn't work2. I have tried different browsers and devices.3. I have power-cycled the device within the CLI and physically power-cycled the ACS. Below is the output after is stop and start the services wi...
Hi We have ISE 2.7 distributed design deployed and working fine with PSN split in two time zones: PAN x 2MnT x 2PSN x 8 I want to split the current network and want to take out 4 PSN from this setup and want to administer these four PSN by deploying ...
Hi, Recently I have patched my Cisco ISE 3 to 3.0.548 and I want to know is this patch supports PLR Licensing ? I would really appreciated if someone can guide me about this.
Hi AllWe have the following issue with our "still testing" Passive-ID (easy connect) implementation. When PC "xyz-pc" boots MAB kicks in, match a policy and Limited access dACL is assigned to PC "xyz-pc" switch port.When the PC User authenticates wit...
Hi Team,I understand that we have a list of ecosystem partner for pxGrid and PAN is not listed there. Do we have any case study or any partner for reference who has done the ISE integration with PAN for Rapid Threat Containment…or any document which ...
Hi to All, I think that a lot of discussion has been around this "No Authentications in the last 15 minutes" and as i noticed int he bug reporting tool this would be fixed in ISE 2.4(357) , however i have this version and the message is still active....
Hi, I am running ISE 2.4 and Firepower FTD 6.4 with the ANC function to quarantine endpoints and that has been working fine, but we recently changed ISE servers and run into problems. On the Firepower side I have created new certificates and configur...
Hello, Sorry if this has been asked or if l missed some basics.Is there a way to create TACACS authorization policy based on the specific username(s) with LDAP, not just based on the group? Thanks,myky
Hey,I've seen it documented that the SGACL size cannot exceed 6KB - "Dynamic SGACL download size is limited to 6 KB" (https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16-7/sec-usr-cts-xe-16-7-book/sec-cts-sgacl.pdf).In o...
HiWe are planning to deploy Cisco ISE with 3 node deployment (Primary PAN, Secondary PAN and monitoring PSN). Please help in understanding, what will be the impact, if single monitoring PSN goes down? RegardsAshish Shah
Hello Has anyone managed to get SNMPv3 traps working in ISE 2.7 patch 3? I don't see any SNMPv3 traps sent out when I restart services, or when I set the disk threshold very high (99% free). However, when I add an SNMP v2c entry, then all of a su...
Hi There,I'm trying to change the background color of my portal. I've tried using the: Global Page Customizations > Images > Background and selecting an image, however it only changes the bottom bar (see image below. How do i change the color for t...
