Is there a capability to give a switch port a default SGT assignment?  Similar to how we can have a default-acl on a switch port in closed mode.   Having trouble with a 50 line default-acl on a 2960 switch.  Would like to use SGT to reduces the size of that ACL but need to have the port assign a default SGT.   ... View more

I am trying to get identity from some of my users logging into a Centos 6.  I am able to get the IP address of the machine but am having trouble parsing the username.  I am not able to get the quotes stripped from the username.  The regex string with ISE 2.3P1 doesn't seem to follow the regex that I am used to.  How can I strip the "" from the username, or does it matter that it is surrounded by quotes? I tried using acct=[^, ]* but that results in my issue of getting "jsmith". type=CRED_DISP msg=audit(1513039700.390:8262): user pid=19739 uid=0 auid=500 ses=1225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="jsmith" exe="/usr/sbin/sshd" hostname=metlab2008-svr1.metlab.local addr=10.1.1.92 terminal=ssh res=success' Thanks ... View more

I am testing Windows 10 with AC NAM 4.3.  All works good except I am seeing two different issues.  1) When the user logs off the machine, the wireless disconnects.  I have the extend connection after user log off enabled in the NAM.  The result is I get no logon servers available if I am not using cached credentials. 2)  Even though I log in as one user,  the NAM actually sends the credentials of another user to ISE.  If I log into the machine as user A, the NAME sends the credentials of user B.  User B logged on at one time but not recently.  The NAM is not set up for single sign on. ISE version is 2.1.  Using  PEAP as the EAP protocol. Any ideas on the issues I am seeing? ... View more