Hey all, Is it possible to push dACLs containing object groups to the switch? Do I need to configure the object groups locally on the switch or can it be pushed too? My main goal is to minimize the amount of ACEs, in order to do so I want to group a ...
Dears, when I do ssh to switches the authentication protocol and in authentication details in the attached snapshot I see the protocol as a PAP_ASCII which is been used. As I know the PAP is clear text password authentication protocol, so how I can ...
Am having a persistent Anyconnect vpn disconnection with the an error relating to MTU. It has been working well until I started getting continuous disconnection after a minute or less. At first I though to be related to network stability from the c...
Hello Team,We have integrated Aruba-CX switches with Cisco ISE for Endpoint profiling. Cisco ISE is configured to use FQDN and other attributes to identify and profile endpoints such as printers, IP phones, etc.However, we've observed that the FQDN a...
Hi guys,I´m using ISE version 3.1 with Aruba Access Point.From RADIUS Accounting Report, there are information about START and STOP, but I CANNOT SEE Account Status Type equal INTERIM-UPDATE.Analyzing the absence of interim-update logs of the radius ...
Hi, I would need some help here. We have an Internal PKI Server integrated with AD and ISE as the AAA server authenticating users and devices. All domain users and machines are automatically placed on internal VLAN upon the dot1x EAP authentication. ...
HiI have a non window/ios/android device that uses security protocol "WPA2-PEAP-RADIUS" to connect to our corporate network.Our device only require SSID, Username and Password input to join the network. Previously, it was working fine until a recent ...
Hey,I'm doing a new pilot to test some stuff.I'm trying to authenticate a PC with external certificate. I create a new policy that checks the "Issuer - Fingerprint SHA-256" but for some reason when I'm looking in the ISE Radius logs all I see that th...
Hi all; Based on Ubiquiti admin guide for RADIUS CoA supportability in APs line of products, you must satisfy the following requirements from the RADIUS server point of view: By default, Ubiquiti APs send NAS IDs to RADIUS server based on BSSID param...
Hi Everyone, I just read that Google Gsuite expose also an LDAPS connection, I would like to know if anyone had a chance to test it and eventually if it allows to retrieve Google identity attributes (groups, etc) with Cisco ISE. I am considering the ...
I need to create a read only custom privilege level for an automated service acct that can execute the show run and show tech commands. I used privilege level 2 for the radius authentication and have the below commands set on my test switch. I am abl...
Does anyone did configure the Infinera authentication with Cisco ISE ? if you do, please could share with me the attributes and setting that you used in the TACACS Profile.
Hi, I am studying CCNP Switch course and stuck in AAA authorization topic. I do not understand what actually is purpose of the following command chain 'aaa authorization network ....'. Cisco books and web-pages define this like sonething: network: Th...
Hello team, In ISE 3.2 (standalone node) have set up REST ID with Azure following all I found in this two documents https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218197-configure-ise-3-2-eap-tls-with-azure-act.html http...
Hello, I have some questions after going through the great post from @Greg Gibbs - Cisco ISE with Microsoft Active Directory, Entra ID, and Intune - Cisco Community Specifically, about the section of User attributes from Entra ID. 1) There it is stat...
