Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,
we're currently implementing ipv6 within our datacenter. We have nexus 7000-series as spine- and nexus 5600-series as leaf-switches.I have the impression that a lot of ipv6 functionality has not (yet) been implemented into NX-OS, while a lot of ...
I have a question regarding ISE profiling servers that are placed behind a load balancer:If you have a ISE environment where both computers and users are being authenticated, and Machine Access Restriction (MAR) is enabled (so users can only authenti...
I have downloaded the new Cisco ISE, I've managed to configure 802.1x and MAB succesfully but I want to configure wired centralized web authentication, but I cannot find any documentation how to configure ISE and Cisco Catalyst (IOS) switches to use ...
We're using ACS 1113 Appliance with ACS version 4.1.4.13. via the RADIUS attributes, clients are re-authenticated every 16 hours. The machine cache is set to 12 hours. This means that, if the user doesn't log off within 16 hours, he will be denied ne...
Hello,I'm currently testing the ACS View 4.0 in a VMWare Environment. I've added 2 ACS servers who are already in production thus generate enough syslog messages.The problem is that the ACS Views requires a lot of mandatory attributes that are not ge...
Nicolas,I'm glad to hear that the MAR cache sync is already in development for ACS and I hope it will be soon implemented in ISE also. I'll keep an eye on new release notes.Thanks a lot!
Nicolas,I'm glad to hear that the MAR cache sync is already in development for ACS and I hope it will be soon implemented in ISE also. I'll keep an eye on new release notes.Thanks a lot!
Nicolas,thanks a lot for this explanation. Now I'm at least warned that we shouldn't place them behind a load balancer (although load balancing ISE policy servers is mentioned in the Cisco ISE user guide under section 9 "Setting up Cisco ISE in a dis...
Actually, I already had an access-list "webauth" locally on the switch. But I had used a deny ACE instead of permit for http traffic, because I read somewhere that the redirect only triggers if the ACL denies the http traffic.Anyway, as that (denyin...
Hi Tarik,the user guide from ISE 1.0 mentions 2 possibilities for web authentication: 1) Wired NAD Interaction for Central WebAuth (where ISE does have a web portal where guests can login with credentials) --> this is what we want to use (page 675)2...
