Cisco ISE – Cisco ISE Tips, Tricks, and Lessons Learned

pfSense admin authentication using Cisco ISE

2023-04-19 Brad Cisco ISE, Configuration

This post covers the configuration of Cisco ISE as the RADIUS external identity source for administrative logins.

ISE 3.1 and Zero Touch Provisioning

2021-09-07 Brad Cisco ISE, Cisco ISE 3.1, Configuration, Tips

Cisco ISE 3.1 added a new feature called Zero Touch Provisioning (ZTP). Not only does it allow you to create a configuration file in which the ISE node can be configured (IP, hostname, DNS, etc.) it can also automatically install any hot fixes or patches immediately after it is set up.

Guest access and randomized MAC addresses

2020-09-20 Brad Cisco ISE, Configuration, Guest Access, Tips

With randomized MAC addresses becoming more of the norm for mobile devices, it’s time to think about how you handle guest access. The main configuration I’ve seen is authenticating the connection, adding the MAC address

Using TEAP for EAP Chaining

2020-05-29 Brad Cisco ISE, Cisco ISE 2.7, Configuration, Tips

Authenticate user and machine certificates at the same time (EAP chaining) without using the AnyConnect NAM.

Using iPSK Manager with ISE for BYOD

2020-04-28 Brad BYOD, Cisco ISE, Configuration, IoT, Tips

Using the iPSK Manager for Cisco ISE for provisioning wireless BYOD and IoT device access.

Authenticating Meraki VPN using Cisco ISE

2020-03-09 Brad Cisco ISE, Configuration, VPN

Configuring Cisco ISE and Meraki MX VPN for client authentications.

AnyConnect ISE posture module discovery host and call home list

2020-03-01 Brad AnyConnect, Cisco ISE, Configuration, Posture Assessment, Tips

Taking a look at the discovery host and call home list settings in the AnyConnect ISE posture module configuration.

802.1x guest users created via Sponsor Portal

2020-02-19 Brad Cisco ISE, Configuration, Guest Access, Tips

Instead of using a Network Access Users account, we are going to create guest accounts via the sponsor portal that are allowed to authenticate using 802.1x.

You need a second ISE node CLI admin account

2019-12-20 Brad Cisco ISE, Configuration, Tips

It’s a scenario I’ve seen pretty often. You try to log into the CLI of an ISE node (SSH or console) with the admin account and the login fails. You verify that the password is

New IBNS 2.0 switch template

2019-10-25 Brad Cisco ISE, Configuration, Switches

After a long delay, I finally finished configuring and testing a new IBNS 2.0 template. A link can be found on my NAD template page. There aren’t a lot of changes between this template and my original C3PL template.

Category: Cisco ISE