When implementing inline tagging on Cisco 3850/4500/9300/9400 switches - adding the propagate sgt command to the uplink interface - I know I have heard this but having an issue finding the documentation - but don't i need to increase the MTU on the s...
How can we set a WLC, configured with multiple WLANs, to use a single same IP address when authenticating 1X clients, regardless of which WLAN the request is coming from? As a parallel, in the Wired world, on a Catalyst switch we can type the command...
Hi,Is it possible to restore a backup from a version 2.2 ISE to a Version 2.6? Or would I neet to upgrade the 2.2 VM/Appliance?
Hello ,I have a customer affected by the following bug:https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs67071/?rfs=iqvredAccording to the note, there aren't any fix published yet.Are there any workaround to fix this problem until a Fix would be pub...
I'm using the ISE API and looking at the documentation for UPDATE queries, I see that the best practice is to try and send "full objects". Currently, I am using the InternalUser endpoint and first I am getting back the full details of a specific use...
Hi All, We have and LDAP integration with ISE and are using the Anyconnect NAM module and profile on Windows machines for EAP GTC authentication.Since NAM is not supported for MAC OS and Linux, how can we achieve EAP GTC authentication on MAC OS and ...
Is there way to check against a local WSUS server for determining if an endpoint is up-to-date? I have a situation where corporate endpoints typically don't have the absolute latest windows patch, and is intentionally left out of WSUS for a period be...
I configured ISE to authenticate users in an AD group for vty access. It is working but in live logs i don't see endpoint info like for the users connecting through wireless devices on a separate policy below. It doesn't even show mac address/IP info...
Hi all, We're having this issue that users cannot complete guest portal registration on some access points. Doesn't happen on all access points. When attempting to connect to the Guest network , the sign-in page is presented after connecting > After...
Hey Guys, We received an inquiry from our visually impaired support staff regarding the ISE's GUI. They would like to know if we can add labels to the “refresh”, “addition”, “edit”, and “delete” icons under the Endpoints menu, see attachment. These i...
Dear Cisco Community, I'm struggling to understand where to place ACLs.I know there are numbered ACLs, standard named ACLs and extended named ACLs. The rule of thumb for standard and numbered lists is:Standard ACLs do not look at the destination addr...
Self-Signed SAML certificates have expired on all ISE nodes, whilst SAML is not currently in use in the environment the alerts are somewhat irritating. Try to generate a new Self-Siged SAML cert and it creates fine on the Primary Admin Node but I rec...
Hi, I am planning on promoting Cisco ISE 2.3 Secondary admin node to primary, it is an 3495 appliance, my question is do i have to do a manual sync up before i promote it and my radius traffic which is currently being served by 4 PSN's will that be...
Hello guys, I have a customer affected by the following bug: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp32898 According the note, there aren't any fix published yet. Are there any workaround to fix this problem until a Fix would be published?...
Is it possible to match upon initial Authentication against an AD Group to then have a different Identity Source used? Generally I'm only aware of it being possible to match against an AD Group AFTER a User has authenticated via an Authorization Pol...
