We have a strange issue with some new switches trying to authenticate wired users using 802.1x.The new switches are 3 x C9200L-48PXG in a stack running IOS-XE 17.6.5RADIUS is setup to use ISE 3.2, which is working with our existing switches.The exist...
Hello,I have to connect our ISE to our AD via an AD Join Point, because we need nested group support.So far I have used the LDAP connector, because I was able to use Port 3268, to send the requests to the GC. Is it possible to address only the GC via...
The network devices have been deleted one by one by using the API. - https://x.x.x.x:9060/ers/config/networkdevice/{id} Complete registration test of many network devices at once by using Bulk API. What I want is to delete the network devices regis...
Hi All, I am working on a migration and upgrade for CISCO ISE nodes in distributed setup: i have 3 x primary CISCO ISE Nodes running on version 2.4 (PAN/PSN/MNT) and 3 x Secondary CISCO ISE Nodes (SAN/PSN/MNT) that we just migrated and used Version 3...
Hi there,We have a bunch of system Certificates expiring ASAP in a PAN failover depoyment (Primary & Secondary)Can you aid in the correct steps to carry out this work. Can you actually import the new certs whilst the others are active and then just d...
Hi everybody,I want to check the Certificate's Subject Common Name attribute in authorization conditions, but all i can find is the Issuer Common name, is there a workaround ?Thanks in advance
Hello, We are setting up guest access using self registration using Cisco ISE, version 2.6.0.156, and we'd like ISE to send an email to guest with the password instead of having it displayed in the browser. It appears that ISE is not sending email af...
I do have a TAC open, but want to see if anyone has an idea while I'm waiting.So, we use a public COMODO cert for our portals. I just got the renewed cert and went to install it last weekend. With the new cert, all portals load with:This site can’t p...
Hi All, I'm trying to test the usage of DUO integrated with ISE. Is it possible to achieve dot1x authentication which can be utilized in both Windows/MAC supplicants? Is it possible to achieve the same with EAP-GTC via NAM client? Can anyone guide me...
HelloI am using Cisco ISE 2.7 in my infrastructure for MAB and 802.1X network access authentication. I have noticed a problem with Cisco Voip phones connected to a switch port. The problem is that after setting up the call, the person making the call...
Hi everyone,Probably someone faced with the same issue: we use WLC9800CL controller, ISE3.2, APs 9120/9115 and C9000 switches (17.8.1). We are also deploying TrustSec.ISE (3.2) <-- SXP --> WLC (17.8.1) -- push config to ap --> API created a rule in I...
At Cisco ISE sponsorportal page customazation -> Print Notification / Email Notification one of the default printout = "If unused, this account will expire on: $ui_guest_account_purge_date$"the variable $ui_guest_account_purge_date$ is equivalent to ...
Hello.We are going to use the API's to create endpoints in ISE and assign these to a specifik Static Group Assignment. And thereby allowing them access to a vlan through a MAB authorization.But in order to keep this up to date we would like to someho...
On VM I get the following error when enabling 802.1x on the switch port where the physical ESXi port is connected. the multi-auth option is selected in ACI. AAA is configured on Cisco ISE with Windows as the default supplicant on VM's. Cisco ISE has...
