IOS and XE switches doesn't seem to support 802.1x on etherchannel interfaces. What is the best practice/recommendation to secure these ports (etherchannel interfaces) to stop someone from plugging in unauthorized devices?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
I have an ASA with about 8 subinterfaces.. due to a recent requirement the rules in 2 subinterfaces are required to be transferred to a new subinterface.. for ex: interface A - 100 rulesInterfaces B - 50 rules New Interface C - 100+50 = 150 rules Wha...
Resolved! Port 8084 not reachable
Hi Experts,We are doing monitoring for certain ISE ports, to check the availability of ISE services and infrastructure.In these include all the mandatory ports as well some other ports, of which 8084 is also a part.Now from last 2 days we are getting...
We have ISE 2.4 Patch 13 I have a 6 node deployment; Node0 = Pri-ADM; Sec-MONNode1 = Pri-MON; Sec-ADMThe rest are policy nodes My issue is that I log all the servers to a remote-target (Splunk) so I can monitor their vitals, but for some odd reason I...
How to see all the snmp traps configured on cisco ISE.Is it visible in CLI or GUIwhere to see all the configurations related to snmp
Hello Right now I am using anyconnect version 4.5.xxxx with a Cisco ISE version 2.2.0.470 patchs 2.4.9. I have a doubt about version compatibility Could I install Cisco anyconnect 4.9.xxx? this version will be compatible with the ISE release I have ...
Hello Experts,ISE Setup:2.7 with patch 3Use case:Run a certain posture checks only for laptops.Configuration:To accomplish this, I have created a profiling policy, which segregates laptops based on hostnames (as naming convention is different for lap...
Hello, I wish to ask about my Cisco ISE deployment. I am currently using Cisco AnyConnect version 4.9.05042 and Cisco ISE version 2.7. So I am currently configuring a Client Provisioning Portal for my users to connect to the network. I have already s...
I am running v2.7 and have two authorization rules for iPSK. The first is for a specific group using a different key. The second rule is the default with the result being the profile with the correct PSK. If someone enters the correct default PSK, t...
Resolved! BYOD with Cisco ISE and WLC
Hi , We are integrating Cisco ISE and WLC for BYOD. Is we need to set same SSID's on both the device Cisco ISE and WLC.
Just finished getting ISE installed for the first time on our network and configured all of the devices. Cisco best practices say to use AD as one of the ways for authentication, but why? With AD authentication to all of your devices, routers, swit...
Resolved! Cisco ISE - Protocol TNC
Hello guys, Can Cisco ISE support Trusted Network connect Statement of health protocol or similiar protocol?ThanksManuel
Hello All, I am facing issue in Cisco ISE for Wired Users and would like to get your help. Below are the details 1. We are using ISE version 2.7. 2. Two different series of Cisco Switches 2960x and 9200 3. No issue faced by users who are connected on...
Hello, We are a Managed Security Services company trying to onboard a customer's Cisco ISE device onto QRadar 7.4.0 FP3.- The logs are landing at the QRadar event collector.- They are arriving as UDP multiline, which is what QRadar expects. ISSUE: H...
I have the Internal certificates settings disabled, if I enabled them, do I need to regenerate new self-signed certs for the CA certificates?I can't find anything in the documentation.
