I have a Cisco ISE 2.4 distributed deployment serving two areas that speak different languages (English and Spanish). We have a need for administrators that may speak either language to log in to and work on the system but I can't find any settings t...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! parameter-map type webauth activate-802.1x and no parameter-map type webauth activate-802.1x
#parameter-map type webauth activate-802.1This operation will permanently convert all relevant authentication commands to their CPL control-policy equivalents. As this conversion is irreversible and will disable the conversion CLI 'authentication dis...
Just testing iPSK, I've followed the official Cisco links and several other people who have set this up, but I must be missing something simple.The WLC is running 8.5.140, ISE is 2.2 Patch 15 As you will see on the policy set picture I've tried to se...
I have created a TACACS policy that allows Helpdesk User group from AD to access switches with a shell profile of default privilege 1 and max privilge of 15 and command sets with limited options. On testing this policy, its giving the user full acces...
Resolved! ISE API change password
Hi Experts, Customer is doing a customzied web page programing for changing ISE internal user password, but they cannot find API to support checking internal user password before this user tried to change the password. Any suggestion realize this c...
Hi, Understand that there's Failure Code 24408 for failed login attempt due to wrong password for AD account. 24408: User authentication against Active Directory failed since user has entered the wrong password Is there any failure code I can look a...
Resolved! AAA accounting update periodic
I'd like to create periodic updates from my 2960x 15.2(2)E7 device to my Cisco ISE server. I am wondering if the global level command needs to work in conjunction with some interface level commands and if so what. My desired end goal is to be able to...
Resolved! Clear Anomalous Behaviour
Hi All I'm running ISE 2.4 Patch 10. Besides deleting the mac address, is there another way to clear Anomalous Behaviour for the device? Thanks Brian Persaud
Hello. I have a customer running very old TACACS 4.9x on Windows 2000. They are looking to migrate this to ISE. All of the users/groups are on the 4.9, not in AD. I assume there will not be an easy way to import this info into ISE. If they are ...
Resolved! SAML End User Auth/
Can SAML be used for end user authentication/authorization?
Hi Experts Customer would like to utilise ISE Guest Self Registration with Aruba Wireless controller They currently have Aruba AP345 AP's and controllers 7210 / 7240 running code 8.3.0.7 They already have ISE 2.4 Is there a documented guide for s...
How does the reauthentication works for a MAB devices, once the intf reaches the end of the reauth timer, let's say, after 180min?With 1X, the switch will send EAPoL request to the endpoint. But how does the switch proceed for a MAB device? In an I...
Resolved! Anyconnect posture module
HI,I would like to deploy an Anyconnect posture module with SCCM software distribution. How do i push the posture profile or the config of the posture module?We can push the software through SCCM and a xml file , however what kind of configuration i ...
Hello. I have a customer that has a centralized HA ISE deployment. They also have another seperate ISE deployment in another part of the network. They would like to change this to one distributed deployment. Is there a guide that details how this can...
Resolved! Cisco ISE Patches
Hi, Is it required to install every patch version or we can install just a certain patch version?For example, we'll just install patch 1,3,5,7 rather install every patch version.I'm using ISE 2.4
