Dear All,I am planning to join a new Domain to my Cisco ISE enviroment.Now I already have a MS Domain Joined, and I use ISE to perform AAA, on the Devices and Users.I am using TEAP with EAP-TLS as inner method. It works well.But when I have added a n...
Hi to All,I have a couple of 9500 connected eachother with StackVirtual, each 9500 nodes connect wirh a Portchanell to two ports of 4500 Sup8. I have tryed to configure MACSEC on the Portchannel ports members. using PSK. But the channel remain down.4...
Dear All,I am trying to configure an MAC ACL on a switch 4500(sup8) and apply it on a Portchannel that is connected to WLC.I have configured the MAC ACL:Extended MAC access list AIROSAPDENYdeny host 309c.245.67a4 anydeny any any (18 matches)and apply...
Dear All,I have setup a CTS enviroment composed by two ISE 3.2 and some switches to test the trustsec, all works as expected.Now I' d like to extend in the production network, the CTS features, in the meantime I will order the Premier license for the...
Dear All,I have configured a test switch port, with Dot1x and Mab as fallback authentication.I connected a new PC that is not know by the ISE, with no certificates, so the Dot1x do not works.I aspect that the MAB auth should not allow PC access to th...
Hi Arne,Thank you for your support.Yes you have understood my question correctly. i will go to compare ClearPass with ISE to see which product is more suitable for my company.Bye,JF.
Hi MHM,I have tryed to apply the MAC ACL to the PortChannel and also on its ports members, but the ACL continue to do not filter the pc mac.Ok It seems a Portchannel limitation as you said. So How I can apply an ACL on a Portchannel? I need it to pre...
Dear All,Finally I found the problem.In the ISE Default Authorization Policy was missing a Policy that deny to the Unknow devices to grant access to the Network.such as:Identity Group-Name Equals EnndPoint Identity Groups:Unknow Results = Deny Access...
Hi MHM,I use internal database.The port is configured in this way:interface GigabitEthernet10/32description LABTESTswitchport access vlan 75switchport mode accessswitchport nonegotiateauthentication event server dead action authorizeauthentication ev...
