About Ciscorocks

Ciscorocks · 01-28-2023

We are trying to integrate our Cisco DNA center deployment with ISE and are seeing an error that is stating a CA chain is broken. The error is referring to the chain being broken for issuer "CN=Certificate Services Root CA" this is under "certificate...

Ciscorocks · 12-27-2022

Does anyone have documentation or a configuration guide on the integration of ISE and Imprivata for 2FA auth for SSLVPN?

Ciscorocks · 12-14-2022

We are trying to set up pxGrid between ISE 3.0 and Medigate medical device platform. The goal is to share data bidirectionally so we can create custom profiles in Medigate and push them to ISE for profiling. We are able to ingest data from ISE to Med...

Ciscorocks · 06-08-2022

Does anyone have any input on the process of renewing the cert that is used for EAP/Admin services in ISE? I am assuming we just create a new CSR and list all of the nodes in the SAN field and have a signed by our PKI CA and import it? I am also wond...

Ciscorocks · 05-04-2022

Hello,Has anyone seen an issue on ISE 3.0 where the PSN nodes are growing CPU and authentication latency over time? CPU has been spiking on all PSNs. These have 24 vCPUs, 96GB RAM, and 310 GB disks. I also have the CPU reservation set for 24,000 MHZ....

Ciscorocks · 02-01-2023

After re-generating the ISE internal root ca and then messaging cert we were able to get DNAC integrated. Make sure the "use DNA center certificate" in DNAC integration settings is unchecked.

Ciscorocks · 01-30-2023

I am seeing this same issue with my DNAC and ISE deployment. ISE version 3.0 patch 5 and DNAC version 2.2.3.3. Nobody seems to know what the issue is.

Ciscorocks · 12-27-2022

I was wondering if there is a guide for setting up imprivata as a token server and using it as an external identity source in ISE. I found quite a bit of documentation for the set up with DUO but not imprivata. I’m assuming its about the same.User co...

Ciscorocks · 11-25-2022

This is a 9300 running IOS-XE 16.6.5. So we should not trust the test? My question is even if the endpoint is running at 100mb do we still look at pairs C and D? and if they are short we have a bad cable and they should be open? Or are pairs C and D ...

Ciscorocks · 11-23-2022

Hi Leo,What if you have a 100M device but pairs C and D are showing as short with pairs A and B are Normal?--------- ----- ---------- ------------------ ----------- --------------------Gi1/0/38 100M Pair A 0 +/- 1 meters Pair B Normal ...

Member Since	‎10-03-2021 07:57 PM
Date Last Visited	‎02-15-2023 11:18 PM
Posts	21
Total Helpful Votes Received	60

User Statistics

User Activity

Cisco DNA and ISE Integration Issue

Imprivata as a RADIUS token server in ISE

ISE PxGrid not recieving custom attributes from a third party platform

Renewing ISE EAP/Admin Cert and PKI CA Cert

ISE 3.0 CPU and Authentication Latency Grows Over Time

Re: Cisco DNA and ISE Integration Issue

Re: ISE Integration pxGrid Root CA Error

Re: Imprivata as a RADIUS token server in ISE

Re: How to Read Cable TDR Testing Result

Re: How to Read Cable TDR Testing Result