Hi there, I want to change my Registration Code. These are my settings before the change: I make this change with the following: <?xml version="1.0" encoding="UTF-8"?><ns0:selfregportal xmlns:ns0="portal.ers.ise.cisco.com" xmlns:xs="http://www...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi Guys, What is the condition for the NAD to declare the RADIUS server is dead? Is it just based on network reachability or service reachability? Network reachability means NAD can just reach to the RADIUS server regardless if the server is too mu...
Resolved! Radius redundancy in IOS config
Hello,I need to implement Radius (ISE PSN) servers failover/redundancy on Cisco switches for 4 radius servers. We have no dedicated Load Balancers to use. As far as I understand there are two options in IOS:1. Use 'radius-server retry method reorder'...
Hi! I´m trying to upgrade Cisco ISE SNS-3595-K9 from version 2.1 patch 8 to 2.2 but presenting the following error: application upgrade proceedInitiating Application Upgrade...% Warning: Do not use Ctrl-C or close this terminal window until upgrade c...
Hi all,There are multiple examples on how to setup TACACS autentication/authorization on the PIXs, but they all seem to use local ACS (on the inside interface of the PIX). What if we have ACS on a remote site and have to send AAA requests across the ...
Resolved! ISE Upgrade Minimal Downtime
Hi Guys, I am looking for possible scenarios how I can minimize the downtime of my ISE distributed deployment specially for my PSN nodes. I am not using LB and what I understand in RADIUS authentication order in NAD, as long as the PSN is reachable...
Hi Gurus, The PAC key for our ASA 5585 firewall expired. When I go to that device in ISE, I can see the old PAC information (shows expired) and I am able to click on 'Generate PAC'. I confirm the device name is the same as its registered name, enter ...
The ISE Secure Wired Access Prescriptive Deployment Guide has a table (see below) of the Access-session host-mode options, however I am wondering what option is recommended for a port where an Access Point is plugged in? Would "Multi-host" be the onl...
Resolved! CSCvg08601 - patch for 2.3?
Hi,Can you confirm fix for CSCvg08601 will be made available for 2.3?thanksBart
I know there are the key design constraints for inter-ISE node communication: · Starting in ISE 2.1: 300ms Max round-trip (RT) latency between any two ISE nodes· BW most critical between: o PSNs and PriPAN (DB Replication)o PSNs an...
Hi guys,Have you seen a Profiler Feed Server error today ? my proxy was working yesterday and earlier this afternoon. now i got this msg : FeedService test connection failed : Feed Service unavailable : SocketException invoking https://ise.cisco.com...
I have this issue and could not figure out why it is happening sho int Gi4/0/16 GigabitEthernet4/0/16 is down, line protocol is down (err-disabled) interface GigabitEthernet4/0/16switchport access vlan 20switchport mode accessswitchport voice vl...
Hi Guys, Does the PSN node groups will provide HA for my PSNs during upgrade process of the PSNs resulting to no service (authentication) disruption? Can I upgrade PSNs even if that PSN is part of the node group? Thanks
Hello I was testing the Device Admin using Radius (instead of TACACS+) and I was quite impressed with how well it works. For customers who only have a few devices and don't want to shell out the big bucks for a Device Admin license. And it kind of...
Hi,How can we restrict number of MAC addresses in 802.1x port authentication with multi-auth mode in a switch. Can we configure and use 802.1x Authentication and Port Security simultaneously in a switch interface in multi-auth mode and would this be ...
