Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About masyamad
Stats
Member since
06-02-2010
93
Posts
18
Helpful
0
Solutions
Created by
Nidhi
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
05-30-2019
10:34 PM
05-30-2019
10:34 PM
Taken offline !
... View more
12-17-2018
03:04 PM
Thanks for the comment. I just want to confirm if it's expected and no specfic requirement for the point. I'll share the info with TAC taking care of my customer's issue.
... View more
12-16-2018
06:09 PM
Thanks for the comment! Promote to primary MnT is sometimes required for scheduled report exporting. And also sometime TAC suggest swapping primary/secondary for problem isolation or solution.
The bug has been filed with Surendra approval but your comment is also appreciated.
... View more
11-18-2018
10:49 PM
ISEがサポートする MIB のページですが、ドキュメントに訂正が入ったようです。
チャプター名が「Supported Management Information Bases for Cisco ISE Endpoint Profiler」となり、
このチャプターは Endpoint Profiling 用にサポートする MIB の説明であったことが判明しました。
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_0100010.html?bookSearch=true
> Chapter: Supported Management Information Bases for Cisco ISE Endpoint Profiler
※ 以前のチャプター名は「Supported Management Information Bases for Cisco ISE」でした。
ISE が応答する MIB/OID 一覧については以下を参照いただくのが良いようです。
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/cli_guide/b_ise_CLIReferenceGuide_24/b_ise_CLIReferenceGuide_24_chapter_011.html#wp4380404450
この情報は下のスレッドから確認しました。 https://community.cisco.com/t5/identity-services-engine-ise/snmp-support-mib-confirmation/td-p/3549087
よろしくお願いします。
... View more
Created by
hslai
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
10-25-2018
08:02 AM
10-25-2018
08:02 AM
On ISE VM, I often see the output of "show interface" not reliable. Since you are able to good results via SNMP, that would be the way to go.
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
10-10-2018
04:12 PM
10-10-2018
04:12 PM
Hi Nidhi,
Thanks for the update.
I checked the description, but it was still slightly unclear.
> UTF-8 support for user name and password applies to authentication against the local identity store as well as external identity stores.
The target of " UTF-8 support for user name and password " is not documented.
Do you mean it contains all of network access user, admin user, and guest user?
But if so, the description conflict following statement.
> Cisco ISE does not support guest passwords with UTF-8 characters.
BTW it's not so convenient that each explanation about username/password support is located on different section.
It would be really appreciated if the guide will have these information in 1 section or 1 table.
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
10-04-2018
11:54 PM
10-04-2018
11:54 PM
OK. I'll contact TAC, but do you mean it's a software defect?
The unit will be shipped to enduser tomorrow. Really need to know if it's a sign of a hardware failure or not.
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
10-03-2018
04:19 PM
10-03-2018
04:19 PM
Thanks for the confirmation. Unlike sponsor portal, I could not find expected behavior of mydevices portal on secondary node so would like to know if it's expected or incorrect behavior. * Admin guides explains about "New Guest (Sponsored or Self-registered) " or "guest password change" but doesn't mention about "new device" or "device status change". https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html#ID59 I understand it's incorrect behavior, will contact sustaining team for fixing.
... View more
Created by
Timothy Abbott
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
09-26-2018
09:00 AM
09-26-2018
09:00 AM
Please have the customer open a support case and work with the TAC.
Regards,
Tim
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
09-11-2018
05:56 PM
09-11-2018
05:56 PM
Thanks. But it's different URL. I hope Admin Access Policies also has similar description.
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
09-11-2018
05:52 PM
09-11-2018
05:52 PM
Sorry for the delayed response, but please let me confiirm it's really same as Group tag doesn't work for portal FQDN. The issue of Group tag doesn't work for portal FQDN is triggered by accessing FQDN shortcut like https://mydevices01.cert-test.com from web browsers. Now I understand it's expected behavior. But for the BYOD provisioning, similar shortcut FQDN cannot be definied because the URL is dynamically generated for each client session. And the admin certificate access is not from web browsers but from network setup application. Now you say it's same issue as mydevices portal. But why does the application requires "<ise_fqdn>:443"? I guess It can simply access "<ise_fqdn>:8443" directly...
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
08-30-2018
04:33 PM
08-30-2018
04:33 PM
I see, thanks for the clarification!
... View more
Created by
.jpg "VIP Advocate")
Arne Bier
in Identity Services Engine (ISE)
Arne Bier
in Identity Services Engine (ISE)
08-27-2018
01:22 AM
08-27-2018
01:22 AM
Making a node Primary doesn't imply redundancy mode. A primary node is the master database that is used to form an ISE deployment. but if there is only one ISE node, and it happens to be the Primary one, then you have one ISE node. There is no redundancy. I don't know why Cisco did it this way (i.e. why they don't allow a node in Standalone mode to toggle the different services).
I never send traffic to a node in standalone mode. In my opinion this mode is only there to configure the ADE-OS, install system certificates and generally prepare the node to be joined to the rest of the deployment.
... View more
Created by
masyamad
in Identity Services Engine (ISE)
in Identity Services Engine (ISE)
08-21-2018
06:24 PM
08-21-2018
06:24 PM
Thanks. But it not so clear with current document. I hope the information will also be added to the guide.
... View more
08-06-2018
07:56 AM
If the goal is to have ISE generate MS PKI certificates, then I suggest making ISE sub-CA of the existing 2016 MS CA. This way, endpoint certificates can be revoked via my devices portal as well as easier to troubleshoot certificate issues within ISE, not to mention the integration of ISE as sub-CA is trivial. https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0111.html#task_E458E69FA39941BBAA9799AAD7FDC644
... View more
Created by
masyamad
in Identity Services Engine (ISE)
05-29-2019
05-29-2019
Hi Nidhi, Thanks for looking into this issue. I just wanted to know if
there are any updates on this...
Created by
masyamad
in Identity Services Engine (ISE)
05-16-2019
05-16-2019
Hi, BTW could you tell me the ALARM implementation. > SMnT
detects that the node has been down base...
Created by
masyamad
in Identity Services Engine (ISE)
05-10-2019
05-10-2019
Thanks for the clarification! > - Alarms are generated only from PMnT .
So if PMnT goes down, you wi...
Created by
masyamad
in Identity Services Engine (ISE)
05-06-2019
05-06-2019
Hi Nidhi, I might mis-understood your explanation. Let me explain my
question again. > For any repor...
Created by
masyamad
in Identity Services Engine (ISE)
05-06-2019
05-06-2019
Hi Nidhi,Thanks for the update. Regarding report generation, admin guide
says secondary MnT run inst...
Created by
masyamad
in Identity Services Engine (ISE)
05-05-2019
05-05-2019
Hi ISE dev/doc team, My customer is considering ISE node failover
operation during each node failure...
12-17-2018
Thanks for the comment. I just want to confirm if it's expected and no
specfic requirement for the p...
12-16-2018
Hi dev team, AFAIK when I enabled debug by cli command (like debug
backuprestore 7), the debug log w...
12-16-2018
Thanks for the comment! Promote to primary MnT is sometimes required for
scheduled report exporting....
12-11-2018
Thanks for the reply. I also think so, but now no official document
seems not to mention about the o...
12-11-2018
When I swap MnT primary/secondary in 2 nodes deployment, usually use
role dropdown in deployment nod...
11-18-2018
ISEがサポートする MIB のページですが、ドキュメントに訂正が入ったようです。 チャプター名が「Supported Management
Information Bases for Cisco I...
10-14-2018
Yes, SNMP query shows both admin and link status but now "show int"
seems to show only admin status....
10-12-2018
Sorry for the quick question. But now I can't find ISE command to check
interface link status. For e...
Created by
masyamad
in Identity Services Engine (ISE)
10-10-2018
10-10-2018
Hi Nidhi, Thanks for the update. I checked the description, but it was
still slightly unclear. > UTF...
Public Statistics
| Date Registered | 06-02-2010 06:43 PM |
| Date Last Visited | 08-30-2019 12:03 AM |
| Total Messages Posted | 93 |
| Total Helpful Votes Received | 18 |
