Hi,Customer wants to replace old switches with 2960 plus one for ISE deployment. Hence wants to know switch IOS version supported by ISE 2.4. Will it be same as 2.3?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
I have ACS 5.6 and have been using ACS for some time to authenticate TACACS for network devices and RADIUS for VPN clients. Today VPN users stopped authenticating and when I run the Radius Authentication report the Radius Status column has a red ...
Hi guys, I came across a new error on Android devices yesterday, “Certificate generation failed.”. I tried on four different devices so far, Samsung tablet, Lazer tablet, Google Nexus 9 and Google Nexus 5X. They are running three different version of...
Hi, We are using ISE 2.3, All Laptops are no-domain PC(windows 7 or 10 etc), but they have Domain account for Citrix login. We do not need authenticate the OS , antivirus etc..., just want use Domain account and MDM attributes for authentication co...
Resolved! ISE NTP Time Source
I have implement Cisco ISE as TACACS server, I configured NTP point to my AD server for time synchronization. Unfortunately ISE always select LOCAL(*127.127.1.0) as a time source. Does we have any configuration to force the ISE to sync time with AD? ...
Hi,In the event that a radius token server or proxy radius server goes down will ISE send an access-reject back to the NADs or will ISE not send any response back and the NADs will mark ISE server down sending the endpoints into critical auth vlan ?
Hello Experts, From the used case scenario's appears the credentials (Username & Passwords) generated by "Guest Sponsors" be used only as a seeding material for Web authentication (Central webauth/ Local webauth). I have got an deployment with a...
Resolved! Cisco ISE 2.1 Patch 1 to Patch 6
Guys,I've read through this documentsRelease Notes for Cisco Identity Services Engine, Release 2.1 - CiscoBut did not state about the path patch from version to version. As we are planning to update the patch from version 1 to 6, isISE ne to follow t...
Hello,We just bought a cisco 1921 and i'm trying to identify my users against an LDAP server. I have two problems:-When I use the test command to test the authentication (test aaa group ...), it only works when the password is in cleartext in the LDA...
Resolved! ISE Time Source Issue
I have implement Cisco ISE as TACACS server, I configured NTP point to my AD server for time synchronization. Unfortunately ISE always select LOCAL(*127.127.1.0) as a time source. Does we have any configuration to force the ISE to sync time with AD? ...
Hello, I am trying to authenticate our IP Phones using the built in MIC certificate. I am unable to find documentation on how to acheve this with ISE. I found an older ACS document, but I find that there are many aspects that are different. I have ...
Resolved! ISE password lifecycle
Hello,Customer has an evaluation of ISE in their network. They have had to update the GUI password twice (long eval) and have leveraged the command line to do so previously. This morning, they were notified that the GUI password expired but they coul...
Resolved! Okta for dot1x
Hi,A customer is using Okta which is based on SAML for authentication to various applicationsCan we leverage Okta for dot1x authentication using native supplicant or Anyconnect NAM or third party supplicant
Resolved! dot1x port-control force-unauthorized
dot1x port-control force-unauthorized My understanding of the above command is the following - force-unauthorized—causes the port to remain in the unauthorized state, ignoring all attempts by the client to authenticate. The switch cannot provide auth...
Guys,Our scenario here when a mobile device IOS/Android connect to our wireless first time they need to accept the Trust certificate.Is there a way to disable the issue of certificate to a particular SSID but the device still login using 802.x?Regard...
