Hi, I’ve promoted my cisco ISE secondary node as primary and when I try to take configuration backup , I get “Cisco ISE Backup creation terminated: Backup script failed. But when I promoted first node as primary again, It works again.
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi,Im looking for possibility to map endpoint certificate value "SAN:URI Intune ID/GUID" that will be used on ASA Remote VPN for client authentication and due to Intune MDM integration I need to send this SAN certificate value as CiscoAVpair/mdm-tlv...
Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...
Resolved! Automating imaging using ISE profiling
I am attempting to automate the imaging process in an environment by utilizing ISE profiling.I have the following pieces working as expected:Using the DHCP probe with the dhcp-class-identifier STARTSWITH PXEClient:Arch:. The endpoint MACs move to a ...
Hi everyone,Recently, I have made couple of changes to the customer's system certificates, NowI’m starting to face an issue with the Sponsor/Guest portal redirection in Cisco ISE and would appreciate your input.Observed Behavior:When accessing the po...
We can’t get users connected to Extreme APs to work as guests. The captive portal and RADIUS are hosted on a Cisco ISE.When they connect, the portal (Hotspot, no authentication) appears and lets them in, but they can’t access the internet. Everything...
Hello! I've been having some login issues when logging into the ISE GUI. After logging in, I get the message: "Oops. Something went wrongInvalid request.Request not processed - Bad input.Please notify your administrator. If you are the administrator ...
I am repeatedly seeing High Latency for RADIUS Access-Request and Queried PIP for Entra ID for dot1x with Entra ID.Is there a clue you can share. ISE version is 3.5 P3. You see below latency value is very high. For MAB auth I do not see this much hig...
Good evening,I have several clients at remote locations that initiate a new authentication every 30–45 seconds after a successful authentication.Could this be due to latency?The TotalAuthLatency is ~500–550 and the ClientLatency is ~400–500.Sometimes...
I have an unusual issue for certain users when they are using dot1x authentication using TEAP , most of the users are working fine only certain users are not showing UserPrincipalName in their ISE log and eventually they are not matching the userAuth...
Hi all; Based on my traffic capture you can see below, my ISE 3.5 Patch 2 box wants to negotiate SMB version 2 and my AD DC accepts it and starts with SMBv2 version, although based on Cisco docs, ISE now supports SMB version 3. Any ideas? Thanks
while create CSR, replacing an existing certificate on ISE
Resolved! PassiveID problems
Hi there,Im having som trouble setting up PassiveID in a new ISE install.ise version 3.4 patch 4I have 3 nodes, all of them have passiveid enabled, and i can see the service running in cli with 'sh app stat ise'in the ise passiveid-agent.log i see th...
In newer version of ISE, i cant find an option or section where i can configure device portal tags. We are using 3.3 version patch 9
Hi FolksFirst post here.My customer has an ISE2.7 installation, being replaced shortly. There are all sorts of issues with it - including the inability to backup the operational database due to some stored procedure errors. As part of the migration t...
