Hello,Wondering if anyone has tried to authenticate users with certificates & then also send back a URL redirect as part of the authorization profile? My goal is to provide different levels of access to users based on the ISE policy matched. I can al...
Hello, Not sure if this is possible. I'd like to create a ISE policy based on the last successful ISE authentication. Something like: If device has authenticated within the last 30 days send them to a full access VLAN, if not send them to limited acc...
Hello, We are upgrading an ISE deployment from 2.1 patch 7 to 2.4. Do we need to patch the 2.1 deployment to patch 8 (Latest) prior to upgrading to 2.4 or is 2.1 patch 7 sufficient to upgrade from? Thanks,
Hello, not sure if this is the right place to ask this question. I'm trying to implement MAB authentication using Meraki Wireless and Cisco ISE. The Meraki AP isn't sending the "Call-check" field in the radius attributes therefore can't match MAB aut...
Hello, I'm wondering if its possible to override the default WLAN AAA servers using a Flexconnect Group?
I see there is an AAA option under Flexconnect Group however when adding a different ISE PSN to the default configured on the WLAN, I couldn't ...
Thanks for your help everyone. @Jason Kunst that link was perfect.
Just to close this off, Meraki does send the “Service Type” radius field. It started sending after I enabled “Cisco Identity Services Engine (ISE) Authentication for Splash Page” i...
Just got confirmation that RADIUS "Service-Type (6)" Attribute in Access-Request packets isn’t supported by Meraki. Will need to come up with a work around.
