Hi good aftnernoon:Can I do a HA in Cisco ISE v2.6 with deployment StandAlone (pan+mnt+psn in one box) and deployement medium (pan+mnt in one box and psn in another box)? Is this deployement is avaible? Or is mandatory have the same deployment: HA de...
hello everyone, Please forgive me for asking this question which I believe there has been a solution to it but I'm new to Cisco ISE and i dont work anything Cisco.I need to integrate a MAF ( HID Authentication server to be specific ). I downloaded a ...
Hi , There is a functional upgrade in Active Directory from Windows 2003 to 2008 then 2008 to 2012.I have gone through the Cisco documents and it says above mentioned windows version is supports in ISE 2.2 patch 15. https://www.cisco.com/c/en/us/td/d...
Good day to all. After updating ISE 2.2 to 16 patchA message appeared.DescriptionNo User Authentication events were collected by the Identity Mapping service in the last 15 minutes.Suggested ActionsIf this is a time when User Authentications are expe...
Hi All,I'm using ISE 2.6 and when i try to backup the configuration via SFTP, I'm getting below error. Does anyone come across this before. Please advise. ISEadmin# backup Configuration_Backup_xxxxxxx repository SFTP-01 ise-config encryption-key plai...
In the "Guidelines for Configuring IEEE 802.1X Multidomain Authentication" (https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/5700/sec-user-8021x-xe-3se-5700-book/sec-ieee-mda.html)it says: MDA allows both a data de...
I am using 802.1x but I am able to spoof a printer port using my laptop. It was suggested that I try using IP source guard. Has anyone used IP source guard to address spoofing?
Lets say you have two domains and they both use certonly-EAP-TLS for authentication.Domain1 computers, phones etc.Domain2 computers.They use the same network infrastructure (same SSID).All RADIUS request end up at one ISE that has policy for domain1....
Hi, Using ISE 2.4. When downloading certificate chain from the certificate provisioning portal the certs are compressed to a .zip-file. It seems it is always a zip-file no matter what OS-template I am using. This is a bit problematic since not all OS...
Dear Expert, i want to ask regarding integrating ISE with Active directory. when we configure ise to join active directory, is it mandatory to use administrator level user from active directory ? if we can do it without administrator user, what ki...
Hello, On my switch, I have all the switchports configured with ISE- 802.X. My question is how can I secure the interfaces that belongs to a channel-group ? Someone can easily unplug the port and plug in any device, and since there is not security on...
Meraki mr33 version 27.4 integration with ise version 2.7 patch 2 When trying to authenticate Guest access, this is done without problems, but when redirecting through CoA, the following unsupported attribute error occurs.All photos referring to the ...
So we're doing machine and user authentication, which is working perfectly, but now i want to know which best practice regarding access restriction to implement after only machine authentication has taken place.So the user booted his PC, but didn't l...
Hi I'm looking to upgrade from ISE v2.3 and had been planning on going to v2.6, as that was the suggested release (one with a star against it) not too long ago. Then v2.7 came out and that has became a suggested release. Now v2.6 is not listed as a s...
Hi,I'm configuring profiling for bunch of Yealink IPPhones, the only thing significant they have is OUI from MAC address and this value I would like to use to profile them. I have configured porfiling policy catching OUI by name but ISE constantly cl...
