11-02-2016 05:26 PM - edited 03-11-2019 12:12 AM
I am rolling out ISE Express for our public guest wifi and so far it's been great. My problem is that I would like our Support Center to be able to connect to a management address to make changes without having to first jump on the guest wifi network.
I have setup two Ethernet interfaces and the necessary routing. When I connect to the Gi0's IP address on the public wifi network I'm presented with the ISE management page. When I connect from my desk to the internal management address on Gi1 I get a message of "Oops. Something went wrong. Access is denied, please contact your administrator."
Any ideas?
11-03-2016 09:20 AM
Admin GUI is only accessible from gig0, not any other interface. you need to move your guest to the other interface, and then use gig0 for your management.
http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/installation_guide/b_ise_InstallationGuide20/Cisco_SNS_3400_Series_Appliance_Ports_Reference.html#ID-1420-00000011
01-28-2018 09:39 PM
Hello friend,
I´m facing same issue and I confirmed that the interfaces's being accessed is int g0 so it discards your comment. Any precise help will be appreciated.
Sincerely,
Horton
01-28-2018 11:46 PM
Can you restate your issue with all the details?
Since you got on an old thread it is unclear whether or not your conditions are the same as the original poster.
01-29-2018 12:29 PM
01-30-2018 03:56 AM
Is this a new installation?
Did you change the IP address after running setup the first time? If so, we have seen this sometimes where the default self-signed server certificate needs to be regenerated.
01-30-2018 01:11 PM
01-31-2018 07:40 AM
In the case of a brand new ISE you need to re-initialize the system.
application reset-config ise
It will give you the option to reset the certificate.
02-01-2018 05:19 AM
@Marvin Rhoads Thank you very much for you instantaneous and impeccable help. That immediately cured my issue. Give you five mate.
02-01-2018 05:39 AM - edited 02-01-2018 05:41 AM
You're welcome. I'm glad it worked for you.
Thanks for the kind words.
p.s Don't forget to change that default 45 days cli password expiration. I've had that one bite me once or twice.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide