Hello Team, I have SXP domain customer1 with mapping for ip 8.8.8.32. And i can not add static mapping for the same ip for different SXP domain: I would call it a bug - not a feature (since we have VPN domains for SXP for such a separation - right...
Team , I need some help with SXP config in ISE . We need to duplicate IP-SGT bindings in different VN/VRF's at the borders and we created these via DNAC . In ISE we created different SXP domains one for each VRF at the Borders . However when we map i...
Hello Friends! We faced with a strange behaviour of ISE 2.4 patch2 In a live session table we have session status Start for every session. But sessions is complete authen\author process. And stay in Authorized state on switch, but in Start state ...
Hello, I want to ask about Configuration WCCP on my Catalyst 6509. This is the topology: This is WCCP configuration on my device 10.204.20.1: ip access-list standard WAVE permit 10.204.19.68 ip access-list extended WAAS-REDIRECT-LIST permi...
Hello, is it possible to have ISE push AMP for the BYOD devices before getting on the corporate network? Endpoints include IPhones, Androids and such. Thanks
I have an ISE 1.3.0.876 Patch 8 distributed deployment Endpoints are on Windows 10 On 08/29 a few users were not able to connect to two SSIDs, by the next day no user was able to connect to our corp or BYOD SSIDs No changes were made to the underlyi...
I deployed a 2.4 ISE .ova in our customers test lab. It's used as our EPNM Radius server. I've created the LDAP external identity source successfully along with authorization profiles. Like I did in ISE 1.4. Now I'm trying to set up Authorization Pol...
I'm having trouble adding a Checkpoint firewall to ISE 2.4. I've been following a blog where the author claims to have successfully added it to ISE 2.1, (here http://mdtnets.blogspot.com/2016/07/checkpoint-gaia-radius-authentication.html). In the p...
Hello, We are working on a long-running ISE pilot for a customer using 2.3. Of course, in the customer environment the ISE node cannot access the internet. I tried to look for the temporal agent in the offline policy feed service update but that’s ...
Hello Team, Do we have any info on state machine for sessions on MNT ? I would like to know: - for how long the session will be maintained in Authenticated state if no accounting messages are sent (was it 5 days ? configurable ?) - what is the differ...
Hi, I am trying to use other fields captured in self-registration portal and send to SMS Gateway. Are there other variables available besides $mobilenumber$ and $message$ to use in the URL that sends the POST to the SMS Gateway? I tried to use $optio...
Hi there I'm trying to implement wired 802.1x network security. I'v successfully configured my switch to support and forward the 802.1x auth request to my Microsoft Radius NPS Server. With a Notebook client I can connect to a port on the switch and...
In my installs I always allow for a whitelist called Remedate_Later that we put MAC addresses into that we can't easily figure out. This allows us to move out of Monitor mode quicker. On a larger install I want to lock the Remediate_Later concept d...
What will happen if a (self-registration) guest portal is configured in an ISE deployment and is assigned to Gigabitethernet 1, but Gigabitethernet 1 is not configured on all PSN nodes in the ISE deployment? Will this work, and if so, is this a sup...
Hi my customer wants to upgrade their ISE estate from 2.3 on SNS3400 to 2.4. The release notes advise that 2.4 is not supported on SNS3400 Series, therefore it appears as though they would need to purchase SNS3500 servers. Is it possible to transfer...
