Network Access Control

Hello   customer asking whether it's possible to use LDAP as Sponsor Group Member check?    We used AD Security Group to begin with, but they asked whether we could use LDAP and reference a completely different AD domain instead.     The LDAP connect...

Hello Everyone ,   We have a 2 PAN & PSN nodes deployment , the one acts as Primary (Admin and monitoring) and other one as Secondary (Admin and monitoring) .   We had to replace the Admin,Portal and EAP Cerificate with new ones due to expiration . S...

So the ISE Admin cert seems to map to port 80, 443, and 9060 for the ERS services. The portals are customizable (port and certificate group).   Question:  Is there a way for the ERS/9060 to be mapped to a certificate other than the Admin certificate?...

Hey team, I'm searching for a good reference document that shows scalability within distributed environment 2.4 (separate PAN/MnT/PSN) now adding TACACS+ and pxGrid functions. What I'm searching for - pro/cons/#s IF I add TACACS+ to existing PSNs tha...

Hi Guys,   I have a portal configured for internet access that requires the users to login using AD credential. Recently I got a requirement to create local users on ISE and those local users should be able to login to the same portal I mentioned bef...

Hello,   I would like to create a rule to allow a users access to a switch and do the following commands: show run show int status conf ter      interface giX/X/XX           switchport access vlan XXXwr   Just this. I tried the following: Create a gr...

Hi Team, As per my network team, we can't create a read only account in ISE server to access all registered node? Is it true?

Hello everyone.   When I checked the application status of ISE, I saw that the Docker Daemon service was not running:   ISE-01/admin# show application status ise   ISE PROCESS NAME                       STATE            PROCESS ID  -----------------...

Question: Is there a way to have ISE block MAC addresses that are repeatitively connecting to the guest hotspot?   Situation:  an hospital provides Guest access for patients through ISE Hotspot.  The hospital doesn't want to use the self-registration...

I have an ISe 3315 v1.4   I can configure two or more captive portal and two or more portal sponsor in the same ISE ??

Hello Community,   is it possible that guests can choose their account duration at the self-registered page? So that they can choose either 1,2,3,4 days or 1 week? We use ISE version 2.1.   Thanks a lot. Cheers Philipp

What is the recommendation if a customer wants to limit access to the self-reg BYOD portal based on AD Groups?  i.e. staff and contractors get access to self register devices, but no one else can access the portal....

After lengthy conversations with TAC and our ISE CCIE it appears our 2.4 patch 2 is running up against a couple of bugs preventing social auth with Facebook.  Has anyone worked around this other than downgrading to 2.4 which was the recommended solut...