Hello,   We are upgrading an ISE deployment from 2.1 patch 7 to 2.4. Do we need to patch the 2.1 deployment to patch 8 (Latest) prior to upgrading to 2.4 or is 2.1 patch 7 sufficient to upgrade from?   Thanks, ... View more

Hello, not sure if this is the right place to ask this question. I'm trying to implement MAB authentication using Meraki Wireless and Cisco ISE. The Meraki AP isn't sending the "Call-check" field in the radius attributes therefore can't match MAB auth in my policy set.   I've logged a Meraki TAC case about this also. Has anyone come across this before. Did you need to implement a workaround, if so how did you go about it?   Thanks,   Below are the radius attributes being sent by the Meraki AP to ISE:   RADIUS Protocol     Code: Access-Request (1)     Packet identifier: 0x0 (0)     Length: 250     Authenticator: xxxxxxxxxxxxxxxxxxxxxxx     Attribute Value Pairs         AVP: l=14 t=User-Name(1): xxxxxxxxxxxxxx         AVP: l=18 t=User-Password(2): Encrypted         AVP: l=6 t=NAS-IP-Address(4): xx.xx.xx.xx         AVP: l=27 t=Called-Station-Id(30): MAC Address:SSID         AVP: l=6 t=NAS-Port-Type(61): Wireless-802.11(19)         AVP: l=34 t=Vendor-Specific(26) v=Meraki Networks, Inc.(29671)         AVP: l=40 t=Vendor-Specific(26) v=Meraki Networks, Inc.(29671)         AVP: l=24 t=Vendor-Specific(26) v=Meraki Networks, Inc.(29671)         AVP: l=19 t=Calling-Station-Id(31): MAC Address         AVP: l=24 t=Connect-Info(77): CONNECT 11Mbps 802.11b         AVP: l=18 t=Message-Authenticator(80): xxxxxxxxxxxxxxxxxxxxxxx ... View more

Hello, I'm wondering if its possible to override the default WLAN AAA servers using a Flexconnect Group?   I see there is an AAA option under Flexconnect Group however when adding a different ISE PSN to the default configured on the WLAN, I couldn't get it to use the PSN configured on the Flexconnect Group.    Should the AAA setting in the Flexconnect Group override the default WLAN AAA Servers?   Thanks,     ... View more

Hello, I upgraded my ISE deployment to ISE 2.2 patch 11. I see that ISE 2.2 patch 11 has since been deferred.   What does Cisco recommend as the stable ISE 2.2 Patch release? Should we wait for Patch 12 or roll back to 9 or 10?    SEVT on Oct 7-13 recommended ISE 2.2 Patch 9. Just wondering if this is still the Cisco recommended patch release?   Thanks,       ... View more

Hello,   Quick question, I want to upgrade our 5508 from software 8.0.152.0 to 8.2.170.0. We are currently running legacy ACS4.2 until we cutover to ISE.  Is there any reason why 8.2.170.0 wouldn't be compatible with ACS4.2?   Cisco ACS 4.2 is EOL + EOS and not mentioned in any of the Cisco compatibility documentation due to age. Apart from that, is there anything I haven't considered that might cause issues?   Thanks,      ... View more