Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi. I have performed a upgrade from ISE2.7 patch7 to ISE3.1 Patch 4. And would like to share some interesting things that happened during this activity. My environment is a two node deployment. I performed the upgrade from cli. Started the upgrade on...
We are running dot1x and ISE, we only do machine authentication. We have configured reauth every 600 seconds. If we have a skype call going on and the switch is requesting the client to reauth the session "Session timeout: 600s (server), Remaining: 0...
I am planing to do an upgrade from 03.06.07b.E to 03.06.08.E. We are running install mode.
There are two commands , wich should I use ? I have two C3850 in my stack.
First:
software install file flash-1:cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E...
Is it not so easy to get the information that you should have plain "switchport access" configuration on the connecting switchports to the ISE appliance. I started with portchannel configuration on the switchports and get severe connection problems.T...
For MAB to work you must enable profiling, If I don’t enable profiling i am not able to edit the identity groups containing the MAC addresses I use to group the endpoints connecting.Essentials:RADIUS authentication, authorization, andaccounting, inc...
The Cisco case is not providing any solution to the problem. Is any one of you able to do the same test. Phone a college (using skype), set the reauth timer (localy on the switchport to like one minute) , authentication timer reauthenticate 60 and re...
Hi here are some of the radius attribites that we send. I think Terminate-Action = Radius-Request is the value of 1.
Access Type = ACCESS_ACCEPTSession-Timeout = 600Termination-Action = RADIUS-Request
/Magnus
