Hello All, Need some assistance around the dACL for Flexconnect Access Points. We have configured all our FlexConnect AP switchports in Multi-Host authentication mode. But when we issue the restrictive dACL the underlying hosts is unable to connect...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hello everybody. I've noticed in my syslog messages like below: %DOT1X_SWITCH-5-ERR_VLAN_FEATURE_CTX_MAGIC: Bad magic value in vlan plugin feature context (hostname) It was produced on stacks of three cisco's WS-C2960X-48LPS-L, IOS 15.2(5)E1 and 15...
Resolved! Posture update no more accessible ?
Hi team,With ISE 2.3, posture update link is no more accessible :Even if the link change for the future ISE 2.4, this link should continue to work for existing customersplease could you check where is the issue ?regardsChristophe
Hi Team,Does ISE have a portal that a delegated admin can self manage their MAC addresses in the MAB database?? The use case is a lab administrator in a Uni science lab can add and remove their wireless MAC addresses for MAB bypass. Thanks, Dave.
Resolved! ISE 1.4 & ESXI 6.5 Compatibility
Hi,Wondering if anyone knows if ISE 1.4 Patch 11 is compatible with ESXI 6.5?We are currently using ISE 1.4 on ESXI 6.0 and our server team have an upgrade to ESXI 6.5 planned.Looking over the release notes...Cisco Identify Services Engine Hardware I...
Hi experts, I just wanted to know that do Cisco firewall have open APIs to integrate with other NAC vendors like Pulse Secure, Clearpass, Packetfence etc? Our management is looking actively at Clearpass since they provide so much integration with...
How do you turn on TACACS Accounting in ACI???
Spine and Leaf Nodes accounting info is not showing up in ISE (TACACS Server). The authentication and authorization info is visible, but not the accounting
ASDM access hangs at 52%, when using account with read-only access. Same account logs in fine via cli. Admin accounts also log in fine via ASDM. Using ISE TACACs for AAA Device is Firepower 4110 / ASDM 7.8.2
Resolved! Guest broken after BYOD
After testing some BYOD options, I was toying around with the guest services deployments.I've removed all profiles/certs from the endpoint, removed the client from the BYOD Registered device, however, when the client tries to log in after being spons...
When creating policy sets, we create conditions that are checked (like wireless 802.1x or wireless MAB) in order to match on that policy set. In the event of multi-tenancy, especially when not all user devices are named a certain way to reflect their...
I had some issues during the migration and after a quick research I found the following link with an excellent workaround (btw, all the Cisco documentation and videos for this process were checked in detail before proceeding with the migration). I wo...
Resolved! GUI doesn't work in ISE
Hello!In the eve-ng virtual environment, I compile a simple network with ise-2.3. In the network are ise, switch and computer. ISE and the computer are on the same network, and I ran into the problem that I can not open the GUI, via a web browser. Al...
Hi, Is there a best practice about how to give access to the users when the ISE node fails and the user ports have a Pre-Auth ACL configured? I've been working on this but I can't find a way to do it, I have this configuration for radius, port an...
Hi guys, Just wondering if it is possible to perform posture check with Window native 802.1x service enabled ? Is there a reason why Cisco Anyconnect NAM is preferred in this situation. What about MacOS ?
