Hi All,We are working on configuring EAP Chaining for both machine and user authentication. Based on Cisco's documentation, EAP Chaining allows both the user and machine to be authenticated in a single session. I'm exploring two methods for this: EA...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hello,I have a specific use case I'd like to verify is feasible. We are installing wireless sensors that will perform synthetic tests. These sensors will connect to all accessible access points. For example, WS-1 (Wireless Sensor) can see AP-1, AP-2,...
Hello, I would be performing an upgrade ISE upgrade for a customer. From 3.0 to 3.4 => which means we have to do a two step upgrade. They have a small deployment Primary node => VM Secondary node => 3615 In order to reduce the time of main...
Hi, We have hotspot portal (created using ISE portal builder) in ISE 3.3, guest user successfully authenticates and receives AUP page but after accepting AUP , mac address is not getting added to right endpoint identity group. Because of that it is n...
Hi Guys Ran into a small issue when deploying 9300 switches using radius for authentication, my issue is when trying to authenticate the debug show me that the switch cant contact the radius server, which is strange because I have deployed 5 2960x ...
Please use below setting on Juniper Apstra to map Admin and Read user Roles.Please use below settings on ISE servers to create Apstra admin and Read profiles: Admin Policy:priv-lvl=15max_priv_lvl=15service=aos-execdefault attribute=permitaos-group=ap...
Resolved! System certificate problems
Hello,I am experiencing issues renewing HTTPS system erificate used for admin and protal access. The old cert has expired, and I cannto delete it until it is assigned to antoher cert. I successfully installed the new cert on the first node, but when ...
I have a load of windows 10 machines which are in ISE but running monitor mode. After upgrading to Win11 they are not able to be on the network. What could be causing this as there is no enforcement mode in place..
Hi community,I had a cisco ISE 3.2 Patch 6 everything was fine until i installed the Patch 7, the API authentication stopped working i got 401 unauthorized i tried with my super Admin account (AD account), i tried to access the API from the browser a...
Configured an identity group and assigned it to the Hotspot Portal in Cisco ISE.Issue: When an endpoint hits the Hotspot Portal, its MAC address is not being stored in the configured identity group.Instead, the MAC address is being stored in the defa...
When I connect to my VPN headend (FTD 7.2.9) I make it through authentication and authorization. ISE recognizes my host as "Posture Unknown", but no browser pops-up automatically with the Client Provisioning Portal. If I open a browser and navigate t...
Need to configure dot1x for VM server Machines how we can do with ISE server.
Is it possible to do 802.1x Authentication for Entra ID Joined Machine ? My Entra Joined machines are not domain joined so my understanding a Cert cannot be assigned for an Entra ID Joined Machine. So how do I do 802.1x Authentication for Entra ID J...
Need a help can't showing PCs
If a guest user successfully registered with guest portal, shouldn't it transfer to "guestendpoints identity group" as a result?For all guest users, I can see that it's in the "profiled" identity group when it hits on guest redirection policy, upon c...
