11-10-2022 09:45 AM
Hello!
I'm setting up a new SDA environment for a customer. They have DNAC 2.3.3.5, ISE 3.1p3, 9500 borders running 17.6.4 and WS-C3650-12X48FD edge switches running 16.12.3s (currently only 2x test edge switches).
I noticed in the ISE RADIUS live logs there are multiple CTS errors for both switches (see attached).
Looks like the switch is trying to communicate with ISE using an unsupported SSL/TLS version which is causing the handshake to fail?
Any idea where I go from here?
I checked Settings > Security settings and these are set to (what I guess are) their defaults: TLS 1.0 and SHA1 ciphers disabled and everything else enabled.
Many thanks in advance!
Matt.
Solved! Go to Solution.
11-10-2022 09:48 AM
TLS 1.0 is required for TrustSec
11-10-2022 09:48 AM
TLS 1.0 is required for TrustSec
11-10-2022 03:12 PM
Hi @ahollifield,
Thank you for confirming. I did end up enabling TLS 1.0 which kicked it into life. Seems bonkers in today's day and age??
11-11-2022 05:14 AM - edited 11-11-2022 05:14 AM
Agree, it's a really common complaint among my customers.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: