How does ISE choose which IP to put in URL redirect response?

Hello,
does anyone know how does ISE choose which IP to put in URL redirect response if it has more than one interface with an IP address and all interfaces are enabled in the portal configuration?
I have a single ISE 1.3 PSN with all four interfaces configured, enabled, each on unique VLAN, and each with unique IP address.
In the CWA portal configuration, all four interfaces are enabled.
Wired clients connect to NAD, NAD sends RADIUS request to ISE, ISE responds with a RADIUS response including the URL-Redirect parameter which specifies the web redirect URL. ISE configuration uses "ip:port" in the URL. 
My question is how does ISE choose which of its four interfaces to put in this URL? Is it always the same interface that RADIUS packets were received on? Or does it always choose the first portal enabled interface? Or is there another logic? Configurable or unconfigurable?
Thanks!

ISE uses the first interface enabled for that portal, so if want to use a specific interface, then only enable that interface.  If interface is GE0, then default behavior is to redirect with ip value set to node's FQDN.  If interface other than GE0, then default behavior is to return the IP address of the associated interface. 
Aliases can be configured for each interface using the CLI 'ip host' command to associate a hostname/FQDN to the IP address of a given interface.  When configured, ISE will return that value rather than IP address in redirect.  This is critical if want to avoid certificate trust warning on connecting clients.
Be sure that certificate assigned to interface includes the correct FQDN or optionally wilcard value in the CN or SAN fields to avoid cert warnings.

Similar Messages

  • How do they choose which ebook to put on the featured list

    My book is up on iTunes. It is very high quality. Howl do they choose which ones to have on the Featured list as opposed to merely the release date category.  Also... What about DRM.? What's the difference and does this accept their decision?

    ISE uses the first interface enabled for that portal, so if want to use a specific interface, then only enable that interface.  If interface is GE0, then default behavior is to redirect with ip value set to node's FQDN.  If interface other than GE0, then default behavior is to return the IP address of the associated interface. 
    Aliases can be configured for each interface using the CLI 'ip host' command to associate a hostname/FQDN to the IP address of a given interface.  When configured, ISE will return that value rather than IP address in redirect.  This is critical if want to avoid certificate trust warning on connecting clients.
    Be sure that certificate assigned to interface includes the correct FQDN or optionally wilcard value in the CN or SAN fields to avoid cert warnings.

  • How does LabView choose which core to use in a multi-core system

    I have to share my multi-core processor with another application.  When this other application runs, it consumes 100% of one of the cores on the system for several seconds.  I am worried about this other application blocking part of my control code, resulting in delayed control signals and possible loss of control. 
    1.  When one core is completely occupied, will LabVIEW put all operations into the other core? (I am guessing this is yes)
    2.  If an operation is occurring on a core that is subsequently 100% subscribed, will LabVIEW move the operation to another core?  Does LabVIEW (or XP) prevent the other application from stalling operations already in progress? 
    The operations I am most concerned with are for the Multifunction DAQ and serial port calls.   
    I am working on a good sized (>100 vi) control system application in LabVIEW 8.2.1.  It is running on Windows XP.   

    1. Yes, Windows will allocate LabVIEW to an open thread on the unused core.
    2. Again, yes, Windows will check for available threads and move LabVIEW to any that are open, it doesn't matter what core that is.
    You can also force LabVIEW code, or parts of it, to run on a specific processor using the timed loop structure. You can find help for setting that up here.
    Chris Van Horn
    Applications Engineer

  • How does oracle know which AO Framework page or process to execute.

    Hi,
    How does oracle know which AO Framework page or process to execute. I use to think this was defined in the Function definition. But looking through some Function definition in HRMS setup I noticed some of them simply calling the same first page, such as the one below used in many managers menus. This initial page is the page that allows managers to choose the employee they want to work on.
    OA.jsp?akRegionCode=HR_PERSON_TREE_TOP_SS&akRegionApplicationId=800.
    My question is, after executing this initial page, how does Oracle then varies the OA page by the diffferent functions?

    Hi;
    Thanks for sharing
    Please dont forget to change thread status to answered if it possible when u belive your thread has been answered, it pretend to lose time of other forums user while they are searching open question which is not answered,thanks for understanding*
    Regard
    Helios

  • How does Leopard decide which Space to present at startup?

    When starting up, Mac goes to Space 2. Would like it to go to Space 1. How does Mac decide which Space and how do I change it to Space 1? Thanks.

    Do you have an app that is assigned to Space 2 that is also in Login Items (starts automatically upon login)?
    If not... Maybe if you disabled Spaces, restarted at least once, and then enabled Spaces, it will go back to starting up on Space 1.
    If you have an app that you always open in Space 1, assign it to Space 1 and also put it in Login Items.

  • When I delete a duplicate song, how do I choose which file to keep?

    When I delete a duplicate song, how do I choose which file to keep?

    What is reappearing is just the list entry with the indication that it is available for download - it's not taking up any space on your computer. You can remove it by control- or right-clicking it and choosing 'delete'.
    The recent changes in iTunes have confused a lot of people. Here is a summary of the situation:
    Only the most recent episode shows when you first subscribe. In the default  'My Podcasts' view click 'Old episodes' to show earlier episodes, click 'Done' to hide them or 'Add all' to keep them there and also add them to List view.
    Alternatively, in 'List' view control- or right-click on the name of the podcast or the episode and choose 'Show old episodes' to reveal all the previous episodes.
    In both views you can now delete both downloaded or un-downloaded episodes from both views by control- or right-clicking on the name of the episode.
    In both views each episode now has a blue circle to the left showing it as unplayed. Each episode can be double-clicked to be played as a stream without downloading it first (so you don't have to wait for it to download fully). Click the cloud icon at right to download it (as you will have to to sync it to an iPod). Note that if you click the cloud icon to the right of the title of the podcast itself, rather than an episode, you will initiate a download of all episodes.

  • Several contacts have the same email address. How can I choose which contact name appears on the address line in Mail?

    Several contacts have the same email address. How can I choose which contact name appears on the address line in Mail?

    you can't really, but you might be able to filter them by message content into folders for each, or color them with tags

  • When sending from a mobile app, how can I choose which of my computers to open the document on?

    I have a laptop and a desktop computer connected to creative cloud. How can I choose which machine to open up a document from my iOS app? I don't want it to open on both overtime I send something from my iOS device.

    The Cloud forum is not about using individual programs
    The Cloud forum is about the Cloud as a delivery & install process
    If you will start at the Forums Index https://forums.adobe.com/welcome
    You will be able to select a forum for the specific Adobe product(s) you use
    Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll

  • How does Illustrator choose where paste objects appear?

    Just curious. When I copy and paste background images, (or any image for that matter) and paste them, they appear randomly out of alignment, nowhere near where the original object was. How does AI choose where these objects are pasted? I see the paste in place option, but is there a key command, like holding down "shift" to have objects paste where your cursor rests?
    Just a thought/wonder since I can't seem to find this answer anywhere.

    Cmd+F and Cmd+B are really much more useful than Cmd+V.
    They allow you to rearrange the stacking order hands-on instead of moving meatballs in the Layers panel.
    A whole new world opened up for me when I discovered this many decades ago (when Auntie Illie was still young and pretty).

  • How does Mail decide which outgoing SMTP server to use?

    I have Mail setup with two accounts - one for home use and one for work.  Each has its own outgoing SMTP server.  My question: how does mail decide which outgoing server to use?  I don't want to mix work and home stuff.
    Specifically, what happens in these three scenarios?
    1) I compose a new mail.  Does it always use the first account's outgoing SMTP server or does Mail look at the recipient's domain and base its decision on that?
    2) I reply to a work email.  Is Mail smart enough to look at my domain or the sender's to know to use the work outgoing SMTP server?
    3) I reply to home email.  Is Mail smart enough to look at my domain or the sender's to know to use the home outgoing SMTP server?
    Any information is much appreciated.
    Tom

    Hi Juergen,
    Thanks for the suggestion - I had to "Customize" the viewable header to include the "From:" ("Von:") line to see who I was sending as.  As far as the "use this SMTP only" checkbox is concerned - they're checked on both my accounts - so I'm not sure how much of an impact that has.  To be honest, I thought this checkbox was meant to limit your outgoing mail (for that account) to this mail server only.  I thought that if it was not checked, Mail will try to send the mail via another SMTP server if the one for this account is not reachable.....after all, why else would Apple allow you to check both servers' "use this SMTP only" checkbox?
    But this is good enough for me - now I can see who i'ms ending as.
    Thanks,
    tom

  • How do you choose which photos from Aperture for Apple TV screen saver?

    How do you choose which photos from Aperture for Apple TV screen saver?

    How do you choose which photos from Aperture for Apple TV screen saver?

  • How do I choose which programme files open in?

    Before I upgraded to Snow Leopard I could double clic on an image in Quark and it would open in the programme that created it (eg photoshop or illustrator) in order to amend or change.
    Now when I do that everything opens in Preview - how do I choose which programme files open in?

    You can right click on a file icon to open a contextual menu to pick an "open with" option.
    You can change the default open with app via the Get Info window in Finder. It also has a "change all" option that will open all of the same file extensions using the app of your choice.

  • How do I choose which items appear when I open my Imac for the day?

    How do I choose which items appear on the screen when I open my Imac (intel) for the day, after shutting down the night before? Thank you. ArmandL

    There are two ways. Mt Lion and Lion have a feature that launches all programs that were running when you logged out or shut down. You can toggle this feature on and off when you shutdown/log out. Or you can set up login items in your user settings which will automatically launch any program you set there. To do this launch System Preferences, select Users and Groups and click on the Login Items but near the top part of the dialog. Click on the + button to add programs you want to be launched when you login or start up the computer.

  • How does Macros help which in Queries ?

    Guys ,
    I wanted to know in detail about the macros.How does they help which are available in Excel sheet of the Bex analyzer.

    A good starting place would be the SAP Help pages on the topic at:
    <a href="http://help.sap.com/saphelp_nw04/helpdata/en/f1/0a55f9e09411d2acb90000e829fbfe/content.htm">http://help.sap.com/saphelp_nw04/helpdata/en/f1/0a55f9e09411d2acb90000e829fbfe/content.htm</a>
    Hope this helps...
    Bob

  • When using Multicam in CS6 how do I choose which source file the audio comes from?

    I've noticed when using the Multi-cam window to create edits, the audio does not change when I select the different video sources. How do I select which source file the audio comes from?

    It doesn't make sense why the multicam source sequence only uses one track of audio. Was this by design? The issue with this as in my situation (and because I didn't know this) I recorded all my source videos with the music tracks on the right side which is what I'm using to cut my video with. Not being able to hear this while I'm cutting is really frustrating. There's a reason I separate dialog on the left side and music on the right. There should at a minimum be an option while setting up the multicam to choose more audio options. Even in the audio clip option settings, those don't seem to work when a clip is put into a multicam source sequence.
    The other issue is when you bring in the audio after the fact or even before, there's no way to sync timecode with audio to the multicam sequence. When I create the Multicam source sequences in my project bin, I choose sync with timecode, not in points, because the record decks I'm using are all locked with a TC gen during the shoot.
    Maybe I'm missing something, but there seems to be either a bug with multicam or a design flaw. Even in the help documentation, it states multiple audio tracks can be brought in with the multicam sequence, but only track one is enabled by default. I've never been able to have the MC sequence bring in more than one track of audio no matter what the audio settings are.

Maybe you are looking for

  • Lack of support from SuperCell

    I have currently spent over 180.00 on in-app purchases for Clash of clans. And I frequented do not receive my gems yet get charged for them. SuperCell says contact Apple. Well I have done so, repeatedly. Apple is responsible for refunds but Supercell

  • Apple TV remote command macbook pro too!

    Apple TV remote controls macbook pro... problem when you want to continue working on your computer while someone else is using AppleTV. any solution to prevent AppleTV remote to control computer?

  • Search not extending to Share Point

    OK so I have 5 macs one of which I use as a filer server.  All running latest version of Mountain Lion. The File Server mac I have set up some share points and applied permissions.  I have owner permissions and all other users have been set read only

  • How do i download version 10.5

    i connected my 4th generation iPod Touch to my new iMac, and i tried to synced music to it, but a message says that iTunes needs a version 10.5 or later. How can i downloah it, if i go to iTunes.com and it says that i can only download 10.6 version?

  • Need to reset/reinstall address book

    I installed a trial version of AddressX and ran it once. Yikes. Now my address book hangs whenever I start it. I have to force quit every time. I need to clear it out or reinstall it. Does anyone know how? Thanks!