Network Access Control

We are using ISE for authorization WLC admin access - ISE has to set service type attribute to 6 (Administrative) for Read-Write access and 7 (Nas-Prompt) for ReadOnly access. After upgrading to ISE 2.2 this stopped to work - we found that in RADIUS ...

Hey guys, We're running a POC with a Prime Cisco Access Registrar as RADIUS, connected to a vWLC version 8.1.I managed to configure PoD message between the RADIUS and the vWLC, which works absolutely fine.My problem is with CoA message. I couldn't fi...

Hello! Is it possible within ISE 2.1 to limit profiling to certain SSIDs only?  (Specifically, the request is to disable it on a Guest SSID, while leaving it enabled on all others.)  Thank you, Deb

Hello - having issues getting SSH to authenticate properly on a Cisco ASA 5500. Below are the respective configs and debug outputs. Any help is appreciated. ///ASA CONFIG # sh run aaaaaa authentication http console LOCALaaa authentication telnet con...

Hi Guys, Good Day! I have an ISE installed in VM. I tried to change the IP address and it seems to be stock right after the stopping of services. Do you know why? Thanks.

Hi guys, does anybody Knows how could I send Maximum-Data-Rate-Upstream/Downstream attributes from ise 2.0.1 to Meraki in order to limit per user bias bandwidth? Regards Rodrigo Enriquez.

I'm trying to configure user mappings for a Palo Alto PA3020 and I have selected to have ISE send Authentication Passed Syslogs to the PA3020, but the policies were not be applied. I checked on Solarwinds to see what the Syslog message really looks l...

Hi,I am trying to configure ASA to send NAS Identifier attribute instead of or in addition to NAS IP in an authentication request to the Radius server.Documentation says that the attribute is supported, but I cannot find how to send it.Any suggestion...