ISE passiveID with same 802.1x AD join point

[eugeniodesideri]

hi y'all ,

i have a cisco ise 2.7 distributed deployment 2pan+2psn:

i want to add passiveID function in order to share metadata (user mapping tru PXGRID )

When i am going trough the wizard , i am not able to add in passiveID tab my Active Directory join point , cause it's already in use by 802.1x identity source.

If i try to go trough manual configuration ( external id source ----> select my ad join point ---> ADD DC ) the fetching

of the DCs keeps failing .

Cannot find nothing about this issue on the guide.

Somebody saw faced the same issue ?

thanks

Eugenio

[eugeniodesideri]

here's a couple of screenshot for a better understanding

[Charlie Moreton]

What patch is installed on 2.7?

Have you gone through the Active Directory Requirements to Support Easy Connect and Passive Identity services ?

[eugeniodesideri]

thx for answering ----

I got a patch 4 installed  .

Have you gone through the Active Directory Requirements to Support Easy Connect and Passive Identity services ?

- yes i did , plus my cisco ISE deployment is behind the same interface where the AD resides.

[Charlie Moreton · Accepted solution]

You should absolutely be able to easily do what you are trying.  Looks like a call to TAC is in order on this one.

[eugeniodesideri]

ok thanks i will forward the issue to a TAC guy