About hslai

hslai · 02-21-2021

Attached are the dictionary and NAD profile as described in Arista CloudVision WiFi Integration with Cisco ISE .

hslai · 09-19-2018

ISE 2.2 Patch 10 has been released at ISE 2.2.0 Software Download since 2018-Sep-18, with the filename ise-patchbundle-2.2.0.470-Patch10-18091119.SPA.x86_64.tar.gz. For more info, please read Resolved Issues in Cisco ISE Version 2.2.0.470—Cumulative ...

hslai · 09-19-2018

ISE 2.3 Patch 5 has been released at ISE 2.3.0 Software Download since 2018-Sep-17, with the filename ise-patchbundle-2.3.0.298-Patch5-18082702.SPA.x86_64.tar.gz. For more info, please read Resolved Caveats in Cisco ISE Version 2.3.0.298—Cumulative P...

hslai · 09-09-2018

As some of you already noticed, ISE 2.4 Patch 3 has been available at ISE 2.4.0 Software Download - Cisco Systems since 2018-Sep-05, with the filename ise-patchbundle-2.4.0.357-Patch3-18090222.SPA.x86_64.tar.gz. For more info, please read Resolved C...

hslai · 07-28-2018

ISE 2.4 Patch 2 Release is now available at Cisco Software Download for ISE 2.4. Resolved Caveats in Cisco ISE Release 2.4 - Cumulative Patch 2 has more info. Update 2018-Aug-03: This Patch Release has been re-posted on 2018-Aug-02. The new bundle ...

Re: User authentication time · 05-23-2023

We may use the Active Directory scope directly as the identity authentication source. That setting is for an ISE identity source sequence so it would not be in effect unless we are using one when we combine the Active directory scope with other other...

hslai · 05-21-2023

@The Arrow If it still stuck, just power cycle the ISE node.

Re: User authentication time · 05-21-2023

@williamtan For active directory, it's preferred to use scopes so the ISE will query all AD join points the same time. It's hard to judge the authentication time because it depends on both ISE and AD servers. AD servers could be busy and slower in re...

hslai · 05-21-2023

@Scott123 The endpoint probe queries the endpoints directly as the info at AD domain controller is not reliable on log-off events.

hslai · 05-21-2023

@Simon Henley In case this is using EAP-TLS, it would worth trying password-based auth, such as PEAP MSCHAPv2. Maybe ISE is not getting the client certificates.

Member Since	‎12-03-2009 07:31 AM
Date Last Visited
Posts	4,174
Total Helpful Votes Received	3412

User Statistics

User Activity

Arista CloudVision WiFi Dictionary and NAD Profile for ISE Integration

ISE 2.2 Patch 10 Released

ISE 2.3 Patch 5 Released

ISE 2.4 Patch 3 Released

ISE 2.4 Patch 2 Release Now Available

Re: User authentication time

Re: TACACS: Reached TACACS+ maximum client limit

Re: User authentication time

Re: ISE-PIC 3.1 not detecting user logoffs

Re: Wired 802.1x not working on C9200L stack