Hello, I have some Cisco 2960X switches in which I authenticate using RADIUS. I was wondering if there's a way to create a non-administrative user for them using a RADIUS server?This user should only execute the following commands: show interface sta...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Dear all,This empty dashboard has occurred not within period of two month in which admin node portal just went empty.TAC was called the first time and restart the services everything work fine. But I am curious knowing under what circumstances can th...
Resolved! Radius proxy use cases
Hi There,There is an option on ISE where it could be used as a radius proxy server.I am quite curious what could be such use case where this could be implemented?Could you please list and explain such use cases?Thank you
Dears Kindly you help to find the Replacement of " IP Device Tracking " Command on C9300 Switch IOS XE 16.6.2because i faced a problem With IP to SGT Mapping in ISE Thanks
Resolved! VM license error when importing
Hello, I have upgraded my lab from 2.3 to 2.4, and the system is asking for the VM license. I have imported the license for the primary PAN, and all went fine, but when on the primary PAN, I try to add the license associated to the secondary, I have ...
Hi, I am trying to hide the Lost and Stolen buttons from the My Devices portal:I managed to identify them, for example the Lost one is id="ui_manage_devices_actions_lost_button": <a href="#lost" data-role="button" id="ui_manage_devices_actions_lost_b...
Wondering if there is some experience out there with something I'm looking to accomplish related to BYOD and the ever changing security/audit requirements we face in the enterprise. Problem: Corporate users currently connect to a 'Mobile' with direc...
Resolved! Interim update on guest SSID
Hi guys, We followed the following doc for guest access with ISE and WLC.https://community.cisco.com/t5/security-documents/ise-guest-access-prescriptive-deployment-guide/ta-p/3640475?attachment-id=164022 At "Configure a Guest WLAN (SSID)" it is not s...
Has anyone implemented ISE guest portal behind reverse proxy or Load balancer. My customer has a public cert on the load balancer(F5) ,which they want to leverage for guest authentication, instead of having a separate public cert on ISE. Currently LB...
Resolved! MDM Attributes Available for Profiling
I don't see a way to use the following attributes in profiling. Am I missing something?
Resolved! Cannot create Certificate Signing Request for Secondary Admin Node from the Primary Admin Node
Hi,I have a distributed cluster running 4 nodes with 2 nodes acting as admin+monitoring nodes and the other two as PSNs. The version running is 2.4 patch 6. Today I tried to generate CSR for all the nodes from the PAN for multiuse, I am not able to g...
Resolved! posture redemption timer
Hi All, Can I make the redemption timer to 0, so that the moment the posture validation is failed, the client will be moved to non-compliant state ThanksNikhil
Resolved! 2.6 Scalability for pxGrid
Hi, In the installation guide for 2.4, we had clear numbers on how many pxgrid nodes etc were supported per deployment model. For 2.6 this does not seem to be listed. Is this information available anywhere? (See pictures below) Regards Gert 2.4: ...
We installed Cisco ISE-2.6 and did an initial config + restore config. Now, we are having issue with time. During installation of ISE - CET timezone was used. When we did "show clock" from CLI - I receive: ISE01/admin# show clock Sun Apr 04 21:18:...
HiI'm working on a TrustSec dev environment using ISE for SGT assignemnt and Policy enforcement. I started looking at a policy that would restrict authenticated clients on a vlan to only ping their default gateway (vlan svi) The Distribution switch ...
