ISE Question

[benolyndav]

Hi

We are having issues logging inot our primary admin node I'm wondering if I run an application stop and start ISE will this break dot1x or is it way I think it is and the PSN nodes deal with dot1x ??  

Thanls

[Rob Ingram]

@benolyndav new and existing 802.1x it should be ok, assuming you have another PSN.

Some features are unavailable when the PAN is unavailable, refer to this guide.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_deployment.html#ID59

I recommend reboot/restart the PAN services OOO in a change window.

[benolyndav]

Hi

Thanks for the info have you any ideas as to why I cant login anymore., I can however login into the Secondary pan node in another data centre.?

[Rob Ingram]

@benolyndav did the local admin password expire?

You can reset the admin password by booting ISE from the ISO image and selecting recover administrator password. Guide: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

https://integratingit.wordpress.com/2017/10/15/reset-cisco-ise-webguicli-passwords/

[benolyndav]

Hi

I can still access the vm through putty is there a way to check on the cli for anything.?

[Rob Ingram]

@benolyndav do you get an authentication failure or can you not access the GUI? Have you reset the GUI password from the CLI?

I assume you are attempting to login using the local admin account rather than to the GUI using an AD account.

[benolyndav]

Hi

Get this when trying to login to gui with AD account not sure how and why this is now happening.?

Oops. Something went wrong

Invalid request.

Request not processed - Bad input.
Please notify your administrator. If you are the administrator check your log file.
You may proceed to Login page.

[Rob Ingram · Accepted solution]

@benolyndav perhaps an issue with the AD integration? Can you try logging on to the GUI using the local admin account (reset the password using the link above if required).