ISE 2.7 add Network Device: HTTP Rest Api

[gaigl]

Hello,

have a problem with a ISE deployment 2.7 (on a standalone VM this is ok)

I want to add a network device for TACACS+ (the same for RADIUS), enter name, IP, type, location, Secret, I get an error

I search and find under Advanced Trust Sec Setting a red field, where I should enter a Username & Password:

where does this come from?

I found something about ERS but this is all disabled, I never configured something about Rest API:

when I enter a username & password it's ok, but a time ago, when I added the last device this was not necessary

could someone help me with this Issue?

Thanks

Karl

[Damien Miller · Accepted solution]

2.7 introduced a new feature with TrustSec device provisioning and updates leveraging a web based https API over port 9063. This is actually independent of the ERS API screenshot you shared, but is related to the network device section being flagged.

Unless you had the main "Advanced TrustSec Settings" configuration section checked, then this should not be a required field and is actually greyed out on my end. I just did a test with ISE 2.7 patch 2, and I did not have an issue generating a new NAD with this section left blank. Which patch are you running, and before anything else I would try a different browser. In the past I have had some odd experiences with password boxes being activated by my web browser.

[gaigl · Accepted solution]

Hi Damien,

thanks for your reply, indeed i had some problems with firefox (window freezes when I klick on AD-Connection), but I think the ISE (2.7 patch2) had another problem:

I wanted to correct the groups of the AD, then all admin-groups disappeared, so I made a config restore, and now adding a Network Device is working fine again.

Sorry that I cannot provide more details, but restore was urgent.

Karl