Hi ,I was asked to disable 802.1X for a few specific ports, and all I had to do was under the switchport: remove access-session port control-auto command.But recently, there was an incident across the entire branch where users were not authenticated ...
I'm seeing this in my log, but everything is working as it should."AD: ISE account password update failed".Everything looks normal under:Administration --> External Identity Sources --> Active DirectoryMy ISE is running 3.4 Patch 6Cisco Bug IDs: CSCw...
Bonjour a tous,Je rencontre un probleme de timeout persistant lors de la mise en place d'une maquette 802.1X avec Cisco ISE 3.x en environnement de test, et j'aurais grand besoin de vos lumieres.Le symptome :Lorsqu'un PC physique tente de s'authentif...
Hi everyone,Unfortunately, old versions of iOS, Android, Chromebook do not include in their Trusted Root CA DB/List, the Sectigo Root R46 certificate so my Web-authentication login portal that uses a cert signed by that Sectigo Root R46 is giving me ...
We are troubleshooting Windows 11 native wired 802.1X using TEAP with EAP-TLS chaining against Cisco ISE 3.4. We are trying to determine whether anyone has successfully implemented the same configuration or has encountered similar Windows supplicant ...
Hi all;I searched google and several documents and resources from Cisco and other experts regarding to find best practices for patching ISE in multi-node deployment. None of them had exact same procedures. Can anyone in Cisco officially state the sup...
Hello Team,greetings.I am seeing a strange behaviour with users, like when first they connect to LAN, laptop is trying to authenticate with MAB and hitting to MAB policy and failing as result "15039 Rejected per authorization profile". we have flow l...
Hello, i get the message when i try to test the connectivite between my switch and ise:Attempting authentication test to server-group ISE using radiusNo authoritative response from any server.I assum that the cnfig in switch is correct and i can reac...
Hey all,Given the recent CVEs we wanted to patch our deployment to 3.4 P7.While preparing, I heard from some colleagues that Cisco TAC had reports of issues related to the patches released on Sept 14. Apparently customers report that patching might b...
According to the below URL, for ISE 3.4 and 3.5, AWS EC2 instance type m5.4xlarge is not supported for medium deployment as an admin node. However, I don't see any issues installing or operating the admin nodes with this instance type, and the CPU/R...
I have been trying to upgrade an ISE 3.3 Patch 9 deployment to version 3.5 and am having issues with the URT running on the Standby Node. This ISE deployment is a small deployment with only two nodes, a PAN and a SAN node. When running the URT, I get...
I have tried 6 times deploying ISE from scratch. Whatever credentials I put-in during initial deployment doesn't work later in CLI but the same credentials always works in the GUI admin credentials. The image which i am using for deployment is "Cisco...
Hi, wondering if anyone can help.We have a Cisco ISE deployment. We need to use an external RADIUS server for 1 of our SSIDs. We want to control what VLAN that user is dropped into, however the external RADIUS is returning a VLAN ID. Normally I woul...
Hi Cisco Community Members,We are planning to install Cisco ISE 3.5 Patch 4 in our production environment to address the recently published critical security vulnerabilities (CVE-2026-76460, CVE-2026-20130, CVE-2026-20192, CVE-2026-20194, CVE-2026-20...
Hello,I am trying to implement 802.1x using EAP-TEAP along with smart card authentication. I selected EAP-TLS as primary and secondary EAP method and chose "Use Smart Card" in both options. But the authentication always fails and the user is unable t...
