Hi, We noticed in the live logs the time is an hour off. We checked the time via CLI and it is an hour off as well like the GUI. When configuring the nodes we used EST instead of EST5EDT or America/New_York. Is there a safe way to change the time zon...
Any issues using same IP address (diff port for TACACS for f5 VIPs for both RADIUS functions and TACACS+ to the SAME PSN nodes? PSN nodes have ONE IP. Example:VIP1: 10.10.10.1 Radius VIP with all its settings for AUTHVIP2: 10.10.10.1 Profiling VIP as...
I can however login SSH with the same credentials with no problem. auacs1/admin# show application status acsACS role: PRIMARYProcess 'database' runningProcess 'management' runningProcess 'runtime' runningProcess 'adclient' runningProcess 'view-databa...
With ISE setup in a distributed deployment, there are PSNs deployed locally to specific locations. In order to point traffic from a particular location to its local PSN, it's my understanding that this can be accomplished by configuring the local NAD...
Hi, please any assistant to push ISE to use the configured NTP server instead of the local one?
Hello I have a Cisco ISE 2.6 installation and I need 15K Plus license, does anyone know if I can buy two licenses (10K + 5K)?In particular the licenses are:E2SC-P-ISEP10KAndE2SC-P-ISEP5K Thanks!
Hello, Any help on this one? I am testing Redirect URL/ACL from ISE to the WLCv for open guest portal access, so the user is authenticated on the portal.The user is able to connect to the wireless network, receives IP from DHCP server, but is not red...
Hi Guys, I've an ISE Deployment with 4 nodes node 1 is the primary admin and secondary mnt node node 2 is the secondary admin and primary mnt node node 3 and 4 are PSN only nodes We need to deploy Sponsor portal in this environment and by default ISE...
Hi Team, I would like to check if ISE guest portal supports the following: At the guest WIFI portal, customer looking at a text box to enter sponsor name.Once the sponsor’s name is partially typed, the text box will populate "possible" sponsor's ...
After some difficulties, finally managed to get a publicly signed wildcard cert. DigiCert was unable to issue a cert, so ended up with Sectigo (formerly known as COMODO).For CSR, used a generic name for CN 'ise.ise.xyz.app', and the SAN DNS has this ...
Hi.As the title say, I have enabled 802.1x (and MAB) via 3CPL and policies on a switchport, and it works fine.Until the computer falls asleep.Then the switchport starts to generate error logs like this:Jan 22 14:16:34.492: %SESSION_MGR-5-FAIL: Switch...
When implementing inline tagging on Cisco 3850/4500/9300/9400 switches - adding the propagate sgt command to the uplink interface - I know I have heard this but having an issue finding the documentation - but don't i need to increase the MTU on the s...
How can we set a WLC, configured with multiple WLANs, to use a single same IP address when authenticating 1X clients, regardless of which WLAN the request is coming from? As a parallel, in the Wired world, on a Catalyst switch we can type the command...
Hi,Is it possible to restore a backup from a version 2.2 ISE to a Version 2.6? Or would I neet to upgrade the 2.2 VM/Appliance?
Hello ,I have a customer affected by the following bug:https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs67071/?rfs=iqvredAccording to the note, there aren't any fix published yet.Are there any workaround to fix this problem until a Fix would be pub...
