About alliasneo1

alliasneo1 · 04-30-2024

Hi all,I've managed to get one PC up and running using dot1x and it's all authenticating correctly. However when I try another PC it just fails.What can I do to troubleshoot this? I've confirmed that the PC's have the same certificates and are in the...

alliasneo1 · 04-23-2024

Hi, I have a Mitel 5312 phone plugged into a switchport configured for ISE but when it boots up it gets stuck on DHCP Discovery. If I put the port to authentication open then it goes through and boots up as normal.The logs all look ok but I can't see...

alliasneo1 · 03-14-2024

Hi,I'm getting this error whenever I log into the client Windows 11 machine. Any ideas what might be causing this?Steps 11001Received RADIUS Access-Request 11017RADIUS created a new session 11027Detected Host Lookup UseCase (Service-Type = Call Check...

ISE Profiles Best Practice · 02-28-2024

Hi,Is it best practice to create a seperate profile for each authentication and authorisation that you do? For example I'm first authenticating the PC and pushing a DACL to the switch to only allow AD access. Would I also create the user profile for ...

alliasneo1 · 02-07-2024

Hi, Any ideas what might be the problem when I get this error? The dot1x authentication is failing for a Windows 10 machine with this: Failure Reason5440 Endpoint abandoned EAP session and started newResolutionVerify known NAD or supplicant issues an...

alliasneo1 · 05-02-2024

We have created an intermediate certificate which we will push to devices. This is trusted by the Root CA. The Root C certificate is uploaded to ISE. Sorry, I don't know much about certificates but that is how it has been setup to my knowledge. In IS...

alliasneo1 · 04-30-2024

When I open MMC and go to Local Computer>Personal>CertificatesI can see the ISE cert in there.

alliasneo1 · 04-30-2024

This is a certificate pushed to the machine via Group Policy.It is a private certificate. Under 'Issued-By' it has our company name.How do I check if the certificate is trusted by the second machine?

alliasneo1 · 04-30-2024

It is EAP-TLS yes.The certificate is exactly the same on the second machine.The endpoint is a HP PC - both the same make and model.The NAD - Cisco 9200Machine Certificate

alliasneo1 · 04-23-2024

It appears to be working now. I put the port config back on and removed authentiation open. rebooted the phone and now it's booted up correctly and I can see the ip address in ISE.

Member Since	‎08-06-2011 07:00 AM
Date Last Visited	‎05-03-2024 02:54 AM
Posts	62
Total Helpful Votes Received	13

User Statistics

User Activity

One PC working but can't get others authorised in ISE

Mitel - DHCP Discovery

15024 PAP is not allowed

ISE Profiles Best Practice

5440 Endpoint abandoned EAP session and started new

Re: One PC working but can't get others authorised in ISE

Re: One PC working but can't get others authorised in ISE

Re: One PC working but can't get others authorised in ISE

Re: One PC working but can't get others authorised in ISE

Re: Mitel - DHCP Discovery