Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

Labels

Forum Posts

Resolved! Port 9061 usage

Hi team,By default ,ADE-OS has 2 conn-limit commands. > conn-limit 5 port 9061> conn-limit 10 port 9060I know the 9060 is used for ERS API but I'm not sure about 9061.Could someone tell me the purpose of the TCP port?

masyamad by Cisco Employee
  • 1545 Views
  • 1 replies
  • 1 Helpful votes

I am trying to implement the Role-based access control (using security tags) for users connecting to the domain. NDAC, Security groups and SGACLs are configured on ISE. Switch is successfully communicating with Cisco ISE as radius server as well as C...

Looking for a way to programmatically export the ISE Network Device list (nightly).Because oops:The following URI is sent when exporting from the GUI, but fails when sent from postman (likely due to csrf check)/admin/GenericImportUploadAction.do?comm...

Sloanstar by Level 5
  • 4457 Views
  • 8 replies
  • 11 Helpful votes

Is there a TAC/Cisco supported deployment running ISE 2.4 virtual machines with a Small VM license (R-ISE-VMS-K9)?  If I deploy VMs and match the hardware specs of a sns3515 we match a Large VM license.  If I remove virtual CPUs to 6 to match the spe...

markgully by Level 1
  • 1258 Views
  • 3 replies
  • 0 Helpful votes

Hi guys   need some help.. the operational backup through the web GUI doesn't work. Neither via schedule nor on demand via "Backup Now" button but via cli it does..   Operational backup details shows:   Status :     Backup Failed: copy to repository ...

jayage by Level 1
  • 7439 Views
  • 8 replies
  • 5 Helpful votes

Is it possible to do downlink macsec without the full NDAC/SGA setup? I am trying to set up encryption from the PC's to the switchport and it is attempting, but never completes. I keep getting these two logs:(I have researched these logs but couldn't...

bunjiega by Level 1
  • 1411 Views
  • 2 replies
  • 0 Helpful votes

I have multiple devices in the BYOD endpoints group in ISE  2.3.0.298. These devices are connected to to an SSID that is MAC filtered and all seems to be working correctly. However, no matter how long they stay in this group they never change from pe...