06-29-2018 02:49 AM - edited 02-21-2020 10:59 AM
hello staff i need help about the ise 2.0.0.306, i use the patch 6 has basic license ISE-VM-K9, i am a user Windows 10 has client machines and the machines is not forwarded to the URL so automatica so manually.
I'll share a few things to consider
07-02-2018 08:15 AM
07-02-2018 08:26 AM
Thanks, I will do the upgrade if this does not work, i'll chenged switch.
07-02-2018 08:32 AM
because on the moment my version is 15.2(2)E5, but i will changed now to 15.2.2E7.
07-02-2018 10:20 AM
Hi, I made the upgrade version, not resulted, I do not have another switch to test unfortunately.
Currently i have: switch c2960x-48lps-l 15.2.(2)E7
07-02-2018 10:22 AM - edited 07-02-2018 10:57 AM
Ok, can you provide your full configuration as an attachment and I'll go through it
EDIT: For testing, can you amend your Authz profile and change the DACL to use the default PERMIT_ALL_TRAFFIC. Then try again please.
07-03-2018 01:10 AM
Hi, i try use DACL permit_all_traffic no result. i share 2 file where is all configuration about this Problem switch and authorization.
07-06-2018 12:53 AM
Hi RJI, I change device, I am using the 3750-G,i share all the configuration of the new device and changed the conditions of the ise. done all this believer has changed nothing, and there is a debug file and the error that I be is: Not an HTTP(s) packet.
!
In Annex all the config file, and show and debug commands
!
More on my device exists:
SW#sh run | inc http
ip http server
ip http secure-server
ip http secure-active-session-modules none
Do you have any idea where this problem?
07-06-2018 03:20 AM
Hi,
Ok, I can see on this new switch you do now have the "URL Redirect" which you did not have in the output of your other switch.
URL Redirect: https://ise_name:8443/portal/gateway?sessionId=0A0132FA00000021046D2767&portal=0d2ed780-6d90-11e5-978e-005056bf2f0a&action=cpp&token=d8827bbe94c4afe70d2b53faec0d350f
So is redirect now working or not?
If not can you run "debug ip http all" test again and then provide the output.
Are you able to resolve the hostname of the ISE server (from the client machine)? If not remove the DACL for testing and try again.
HTH
07-06-2018 04:02 AM
Hi,
Does the output for this command debug ip http all , The client machine reach the ise_name and ise_ip.
07-06-2018 04:03 AM
So is redirect now working or not?
Redirect not Working.
07-06-2018 12:54 AM
07-06-2018 12:54 AM
12-15-2019 02:52 AM
greetings,how can i associate local user with ip address of pool on cisco router. I can do with cisco ASA, example:
username user1 attributes
vpn-framed-ip-address IP MASK-da-POOL, I want to do the same thing on cisco routers. Can someone help me with this.
07-02-2018 11:39 PM
Can we get back and rewise the problem?
Do you awaiting that W10 client will automatically pop-out browser window with CWA page? Close to the time when you plug-in ethernet cable.
Do you claim that when you manually open browser in W10 client, then try any web page, the redirect will work?
07-03-2018 01:02 AM
Sure, the idea is when I connect the ethernet cable from the client machine i have a pop up or when attempting to access a web site is automatically routed to the Customer Portal Provision and check the anti-virus, etc.
At this time if you are trying to access a page not happens the redirect, for me to be able to access the Customer portal provision so copying the url.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: