Hi GuysI have some questions around SG ACLs and Trustsec1.We have a mix of 9200 / 9300 / 2960X / 2960CX / 4500x switches, do these support SGT, inline taging, SXP and SGACLs ?2.Is there a limitation to the size of SGACL we can use on the switches? We...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hello all,I am trying to set up three CBS 350 switches to have following features:Workstation ports have Auto Voice vlan, LAN with 802.1x and guest access for devices that don't authenticate with 1x.In 99% cases each switch port will go to an IP Phon...
I'm trying to create an endpoint via the API and assign it to a specific group and can't figure out where I'm going wrong. Can someone give me a hint? ISE_LAB_URL="https://serverurl.com:9060/ers/"CONFIG_ENDPOINT_URL="config/endpoint"CONFIG_ENDPOINT_...
Resolved! Cisco ISE disconnected node
ISE Nodes in deployment dissconnected after change self signed certificate to CA wildcard certificate .when i tried to register ise i got below error, can some one help me to solve it please.Unable to authenticate ISE (xxxise) Please check certificat...
Hi,I need to set up an URL filtering policy based on AD groups. Most users will have URL restrisction while a specific AD group will have full access.I have 2 cisco FTD managed by an FMC.Is it possible to set up this rules without ISE ? Is it still p...
Hello dear experts!Recently I finally got my order of 3x CBS350-48P-4G switches. So far we were working in a simple and insecure manner - we have one workstation VLAN, IP phones connect directly to the switch ports and via passthrough on the IP Phone...
Hi I am trying to implement an 802.1x network in foreign/anchor setup, with an ISE web-auth redirect for devices in the “blacklist” endpoint group.My foreign WLC WLAN is doing the RADIUS auth and accounting requests, and the Anchor WLC WLAN has RADIU...
Hello,on Dezember 14 I installed on a ISE Deployment 3.1 the Patch 5since then I've got no TACACS-Logs.Radius Logs are ok, and the Hit Counter in the TACACS Policy Sets is ok as wellAny Ideas?
Hi All , The configuration on Active Directory can assign frame IP Address to Cisco ISE for VPN connection . But If need more frame ip address on User can assign another attribute aside from msRADIUSFramedIPAddress ? Please suggest me.
Hi, I am gettning warning messages in ISE sayingCause:Dynamic Authorization Failed for Device: 0002SWC003 (switch)Details:Dynamic Authorization FailedIt is not only on that switch but on all switches I have configured. I am using 3560 IPBase 12.2(55)...
We are currently in the deployment phase of ISE and in an effort to ensure that administrators/technicians have the most commonly required information visible to them from the start I would like to modify the default view within the Context Visibilit...
Hello to all. I want to disable EAP-GTC option but I would like to know the impact on the clients before doing it: if the sessions are disconnected inmediatly, if the sessions are maintained untill the client is connected,...., or what is the behavi...
Hey guys, I'm trying to find a way to authenticate users coming from Cisco ASA with certificate and DUO from ISE.The idea is to follow the steps bellow :Users connects to ASA VPN with AnyConnect Client.Device certificate is send to ASA and ASA forwar...
Resolved! ISE Certificate SAN
Hi, I am setting up an ISE 3.1 cluster with dedicated PAN, MnT and PSN nodes for a customer. The certificate on ISE for Admin and EAP Authentication roles is signed by Corporate Issuing CA. The certificate contains the FQDN's of all the ISE nodes in ...
