ISE and MSE Integration

[behrouz6408021]

hello

i have ise 2.0  and mse 8.0.150.0 , when i add MSE to ISE i get this error .

"No response. Network error or invalid IP address"

i completed all of the configuration about Cisco prime , WLC and MSE . all of them working and no problem with each other . but i when add MSE in to ISE 2.0 i get this error

do you have idea for this problem ?

[mnagired]

Hi.

Can you please go through the link below and make sure all the pre-requisites are met and basic troubleshooting is done.  

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/200196-Location-based-authorization-with-Mobili.html 

[behrouz6408021]

Hi . i want visit this page . but it is not available

[mnagired]

Can you try this. it works for me. 

Attaching doc as well.. 

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/200196-Location-based-authorization-with-Mobili.html

[behrouz6408021]

Ok . Thanks 

all of prerequisites is Ok and done . MSE is reachable from Prime and MSE NMSP with WLC is Ok . 

all of components is done and working and MSE CAS service is Ok and working .

but when add MSE to Cisco ISE i get this error . I read many Documents about MSE and ISE integration .

but i cannot resolve this issue .

[behrouz6408021]

when i TCP dump with ISE and open file with Wireshake  this is relationship between ISE and MSE . 

I see only TLSv1 and there is no any things . 

I cannot understand problem .......

do you have any idea ?

[Jason Kunst · Accepted solution]

Would recommend reaching out to TAC. MSE is old, everything is moving to CMX. Also ise should be minimally at ISE 2.2


https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/200196-Location-based-authorization-with-Mobili.html


https://cisco-marketing.hosted.jivesoftware.com/servlet/JiveServlet/previewBody/68069-102-2-124763/ISE_2.0_MSE_Location_Based_Services_LabGuide-14jun2016.pdf


https://cisco-marketing.hosted.jivesoftware.com/servlet/JiveServlet/previewBody/66517-102-2-120142/ISE_MSE_Location_Based_Authz_Slides_public.pdf

[behrouz6408021]

Hi Jason

Can i use CMX for location authorization in the ise ?

I want use MSE or CMX for integration with ISE . only for Location Service  and re authorization when mobile user change location base on policy configuration on ISE .

can i do with CMX ?

[Jason Kunst]

Please see note in this document
https://community.cisco.com/t5/security-documents/ise-location-base-services-with-mobility-services-engine/ta-p/3636098