Installation of Cisco ISE 1.1.4 on Cisco NAC Appliance 3315

Hi,
I am re-imaging the Cisco NAC Appliance 3315 and installing the Cisco ISE 1.1.4...
After finishing the Installation, when i type "SETUP"... It gives me the below Error;
# ERROR:  INPUT/OUTPUT ERRORS FOUND DURING THE INSTALLATION!        #
# PLEASE REIMAGE THE APPLIANCE OR VM FROM THE INSTALLATION MEDIA.   #
Please advise....
I tried to change the Time/Date as per UTC/GMT accordingly... But, i didn't find the RAID in CLI... see the link below
(http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_app_f-installing_on_NAC-AC.html)
any idea...
Regards,
Mubasher Sultan

Where did you get the recovery media? Did you download from cisco.com?
Please download the image from CCO and ensure the ISE image is valid by checking the MD5 checksum of the downloaded image is matching to CCO image.You will then need to burn this ISO image onto bootable DVD.
Supporting link:
http://www.cisco.com/en/US/docs/security/ise/1.1/installation_guide/ise_ins.html#wp1134146
Jatin Katyal
- Do rate helpful posts -

Similar Messages

  • Cisco ISE migration from VM to SNS 3415 Appliance

    HI Experts,
    My customer is running a ISE VM  ( os is 1.1.1 ) with base license used only for guest authentication . As per the requirement we need to migrate the existing setup to the ISE hardware  (1.2 ). 
    Can anyone please help me in the best way to do .
    I am planning to install a new ISE setup rather than migration but confused regarding the ISE Licensing .
    Thanks in advance 
    Regards
    Agnus 

    Angus,
    First and foremost, you must have a current, non-expired license.
    The best way to accomplish this is to log in to the Licensing Portal:
    https://tools.cisco.com/SWIFT/LicensingUI/Quickstart#
    Click on Licenses.  Choose the license you would like top transfer to the new 3415 Appliance.
    Note that I have selected two licenses, Base and Advanced.  You can only select ONE LICENSE at a time.  To Re-Host a Base and an Advanced License, you must do this twice.
    Then click Actions > Rehost/Transfer...
    A new window will appear requesting the information from your new 3415 Appliance (you must have already installed ISE on the appliance):
    You can find this information on the new 3415 by going to Administration > Licensing and clicking on the name of your node.
    This is all found in the ISE Admin Guide.
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0111.html#concept_E664BCA9F4164C7F8DE590B7C2C4AD99
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Does Cisco ISE-3315-K9 with ise version: Service Engine: 1.0.4.573 support command accouting like ACS

    Hi
    Can Anybody can update whether   ISE-3315-K9 with ise version: Service Engine: 1.0.4.573 , supports the command level accounting
    Bascially , we have integrated Cisco Switches with Cisco ISE for Device Authentication using Radius , we are able get the authentication logs on to the devices , but for any command changes or update done on Cisco devices we are not able to get the command accounting ..
    has succeed in  command level accounting on  Cisco ISE ..
    Please update
    Cisco ISE doesn't have TACACS feature ...

    Command Accounting is a TACACS+ feature so not for ISE....yet.
    However, you can do the following to send commands to syslog and not including passwords (hidekeys). I just picked 200 commands/lines to store in the local command buffer/log. increase or decrease as you have memory.  The notify syslog is what sends it via syslog.
    conf t
    archive
    log config
    logging enable
    logging size 200
    hidekeys
    notify syslog
    end
    wr mem
    Remember, syslog is clear text  :-)  log away from user traffic when possible.  Or use TLS based syslog when possible.
    I hope you find this answer useful, if it was satisfactory  for you, please mark the question as Answered.
    Please rate post you consider useful.
    -James

  • Trying to load Balance several Cisco ISE servers.

    Trying to load Balance several Cisco ISE servers.  For persistence, Cisco recommends using Calling-Station-ID and Framed-IP-address...Session-ID is recommended if load balancer is capable of it.  I have documentation for the Cisco ACE, but using F5 LTM's.  Assuming this has to be done with an I-Rule as none of these are available as a default.  Not sue where to begin.  I tried attaching the Cisco PDF, but not able for whatever reason.

    Please also keep in mind that When using a Load-Balancer (anyone's) you must ensure a few things.
    Each PSN must be reachable by the      PAN /  MNT directly, without having to go through NAT (Routed mode LB,       not NAT). No Source-NAT. This includes the Accounting      messages, not  just the Authentication ones.
    This means the       Load-Balancer must be in the direct path between the clients and the ISE PSNs.
    Some       organizations have used Policy  Based Routing (PBR) to accomplish the       path, without physically  locating the Load-Balancer between the clients       and the PSNs.
    Endpoints (clients) must be able      to  reach each Policy Services Node Directly (not going through the VIP) for       redirections/Centralized Web Authentication/Posture  Assessments/Native      Supplicant Provisioning, and more.
    You may want to "hack"      the certs to include the VIP FQDN in the SAN field (my next blog post      should cover this trick).
    Perform sticky (aka: persistence)      based on Calling-Station-ID and Framed-IP-address.
    VIP gets listed as the RADIUS      server of each NAD for all 802.1X related AAA.
    Dynamic-Authorization (CoA):
    If you use       Server NAT to replace the  PSN IP address with the VIP Address for Change       of Authorization,  then you would use the VIP address as the       Dynamic-Authorization  (CoA) client.
    Otherwise, use       the real IP Address of the PSN, not the VIP.
    The LoadBalancers get listed as      NADs in ISE so their test authentications may be answered, to keep the      probes alive.
    ISE uses the Layer-3 Address      to  identify the NAD, not the NAS-IP-Address in the RADIUS packet. This       is a big reason to avoid SNAT.
    Failure Scenarios:
    The VIP is the RADIUS Server, so      if the  entire VIP is down, then the NAD should fail over to the Secondary       DataCenter VIP (listed as the secondary RADIUS server on the NAD).
    Use probes on the Load-Balancers      to ensure that RADIUS is responding, as well as HTTPS (at minimum).
    LB Probes       should send test RADIUS  messages to each PSE periodically, to ensure that       RADIUS is  responding, not just look for open UDP ports.
    LB Probe should       also examine the response for HTTPS, not just look for the open port(s).
    Use node-groups with the L2-adjacent      PSN's behind the VIP.
    If the       session was in process and one  of the PSN's in a node-group fails,       then another member of the  node-group will issue a CoA-reauth; forcing       the session to begin  again. 
    At this point,       the LB should have  failed the dead PSN due to the probes configured       in the LB; and so  this new authentication request will reach the LB &       be  directed to a different PSN…

  • Radius Health Check - Cisco ISE

    I have one Cisco ISE setup with AD authentication. I want to configure radius helth check how it can be confiured on switches.
    Best Regards,          

    For example if we have too many authentications per second, more than what the PSN Specifications are designed for. In such cases we've to distribute the radius load to other PSN’s. You can also run Catalog report to draw a graph of Radius latency per PSN instance under Operations>Catalog>Server Health Summary> Last 7 days> PSN Hostname.
    This will only give you a trend of radius latency but not the reasons why. You need to go through logs of the concerned PSN to find out whats going on the PSN. Certainly Radius latency greater than 3 Seconds is concerning. In such scenarios we have to download the support bundle and analyse the logs.
    Cisco ISE Dashboard Monitoring
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_mnt.html#wp1226014
    Jatin Katyal
    - Do rate helpful posts -

  • Need Step by step installation guide for Cisco ISE in distributed environment.

                 Hi Friends,
    If anyone is having  step by step installation guide for Cisco ISE in distributed environment please shere!
    I have user guide from Cisco, but does someone have created at the time of actual installation.
    Thanks,
    Sachin

    There is a trustsec 2.1 how to guide on cisco's website. There is also a TrustSec 2.0 ISE Guide floating around that has step by step instructions for setting up ISE 1.0.4. Which is still pretty accurate for the 1.1.1 guide. But if you go through the below site it should give you all the info you need.
    http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html

  • Cisco ISE Installation

    HI SIRS
    I have a big problem with cisco identity service engine 1.0 ,
    cisco said that you can install this software on esx 4.0 , I have tried it but in does not work ,
    Is there anyone here to work with this new software?
    I wonder , if you could help me.
    BEST REGARDS.

    For  the ISE installation (any version) kindly refer to the hardware  requirement this helps and make installation very easy. Also do check  the following links for vmware machine and ise installation
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_vmware.html
    http://www.youtube.com/watch?v=TZuCK610TJI

  • Cisco ISE installation on VMware Workstation ?

    I am trying to install Cisco ISE image through Vmaware Workstation , but after starting VM getting redhat console but not the same console required for setup of actual ISE . Would like to know whether VMware workstation supported for ISE installation as all the cisco docs specifies the image to be mounted on ESX server, then login to client to run setup.. Please help...

    Cisco "Officially" supports VMWare's ESXi/vSphere platform.  Yes, ISE works in VMWare Workstation, but is not tested on every hardware platform available, therefore, not supported.  The the case mentioned above,
    I've started installing ISE 1.2 (redhat linux 5 64 bit)  , looking at the posts above.. on VMware workstation 9..
    1stly I gave 6gb ram ( my laptop has 6 gb ram & 290gb free space ) and started the installation process..
    then  after the starting stage of checking the requirements of my laptop  started and the formatting of the disk began , my lap became very slow  & it got hanged there..all my pc processes moved like snails..!! got  frustated..
    then I restarted my lap and this time I gave 4gb ram .. and it worked fine from then on..
    can  anyone tell me , if this has to do anthing with the physical memory we  give over there in the ise installtion process..does it actually use the  entire ram we mention over there..??
    Niklas
    All possible System RAM was allocated to the ISE VM, and the ISE VM used ALL of the RAM leaving none for the host OS, thereby slowing the machine to a crawl.  Once this Virtual RAM was sized to the ISE minimum of 4GB (leaving 2GB dedicated to the host OS), the machine worked correctly.  Yes, the ISE VM will happily use ALL the RAM allocated to it.
    This is also the reason that Virtual Box and other "Desktop" class virtualization environments cannot be supported across the board.  Nearly every machine hosting VMWare Workstation, Virtual Box, etc... has a different chipset, video card, HD controller, and on, and on...
    The best thing to do for your situation is to try to install it.  If it works, document your EXACT system configuration and the EXACT virtual configuration so that you may look back to it for future installs.  You can also use this information to "tweak" the virtual settings until you get a combination that works for you.  This will help to document the configurations that do not work on YOUR desktop environment.
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Cisco ISE Installation on C22 M3

    Hello All ,
    i have to install Cisco ISE 1.2 on VMware (ucs server C22 M3) , i was searching for OVA file but no luck . can any send me the link to download the same .
    thanks .

    you can download it from the following link but you need to have access to it and have valid Cisco account
    http://software.cisco.com/download/release.html?mdfid=283801620&softwareid=283802505&release=1.2
    ******Do rate helpful posts************

  • Do I need Cisco ISE VM Part # L-ISE-VM-K9= for ESXi installation

    Hi there,
    Do I need the L-ISE-VM-K9 license to install Cisco ISE on an ESXi ?
    Actually, Cisco ISE can be downloaded with an Eval License for 90 days.
    I know, ISE license (e.g. Base License) is needed.
    Thanks a lot.
    Greetings,
    Norbert

    Just in case you you would like to see the specification of each licence.
    License Type
    Features Supported
    Deployment Type Supported
    License Prerequisite
    License Term(s)
    Base License
    AAA
    Guest Provisioning
    Link Encryption Policies
    Wired
    Wireless
    VPN
    Perpetual
    Advanced License
    Device Onboarding/Provisioning
    Device Profiling and Feed Service*
    Host Posture
    Security Group Access
    Integrated Vendor MDM Support*
    Wired
    Wireless
    VPN
    Base License
    3- and 5-Year Terms
    Wireless License
    Device Onboarding/Provisioning
    AAA
    Guest Provisioning
    Link Encryption Policies
    Device Profiling and Feed Service*
    Host Posture
    Security Group Access
    Integrated Vendor MDM Support*
    Wireless
    3- and 5-Year Terms
    Wireless Upgrade License
    Device Onboarding/Provisioning
    Authentication/Authorization
    Guest Provisioning
    Link Encryption Policies
    Device Profiling
    Host Posture
    Security Group Access
    Wired
    Wireless
    VPN
    Wireless License
    3- and 5-Year Terms
    Cisco ISE Functionality-Based License Options
    License Tiers (T)
    Number of Endpoints Supported
    Base License
    Advanced 3-Year License
    Advanced 5-Year License
    Wireless 3-Year License
    Wireless 5-Year License
    Wireless Upgrade 3-Year License
    Wireless Upgrade 5-Year License
    100
    100 Endpoints
    L-ISE-BSE-100=
    L-ISE-ADV3Y-100=
    L-ISE-ADV5Y-100=
    L-ISE-AD3Y-W-100=
    L-ISE-AD5Y-W-100=
    L-ISE-W-3UPG-100=
    L-ISE-W-UPG-100=
    250
    250 Endpoints
    L-ISE-BSE-250-
    L-ISE-ADV3Y-250=
    L-ISE-ADV5Y-250=
    L-ISE-AD3Y-W-250=
    L-ISE-AD5Y-W-250=
    L-ISE-W-3UPG-250=
    L-ISE-W-UPG-250=
    500
    500 Endpoints
    L-ISE-BSE-500=
    L-ISE-ADV3Y-500=
    L-ISE-ADV5Y-500=
    L-ISE-AD3Y-W-500=
    L-ISE-AD5Y-W-500=
    L-ISE-W-3UPG-500=
    L-ISE-W-UPG-500=
    1000
    1000 Endpoints
    L-ISE-BSE-1K=
    L-ISE-ADV3Y-1K=
    L-ISE-ADV5Y-1K=
    L-ISE-AD3Y-W-1K=
    L-ISE-AD5Y-W-1K=
    L-ISE-W-3UPG-1K=
    L-ISE-W-UPG-1K=
    1500
    1500 Endpoints
    L-ISE-BSE-1500=
    L-ISE-ADV3Y-1500=
    L-ISE-ADV5Y-1500=
    L-ISE-AD3Y-W-1500=
    L-ISE-AD5Y-W-1500=
    L-ISE-W-3UPG-1500=
    L-ISE-W-UPG-1500=
    2500
    2500 Endpoints
    L-ISE-BSE-2500=
    L-ISE-ADV3Y-2500=
    L-ISE-ADV5Y-2500=
    L-ISE-AD3Y-W-2500=
    L-ISE-AD5Y-W-2500=
    L-ISE-W-3UPG-2500=
    L-ISE-W-UPG-2500=
    3500
    3500 Endpoints
    L-ISE-BSE-3500=
    L-ISE-ADV3Y-3500=
    L-ISE-ADV5Y-3500=
    L-ISE-AD3Y-W-3500=
    L-ISE-AD5Y-W-3500=
    L-ISE-W-3UPG-3500=
    L-ISE-W-UPG-3500=
    5000
    5000 Endpoints
    L-ISE-BSE-5K=
    L-ISE-ADV3Y-5K=
    L-ISE-ADV5Y-5K=
    L-ISE-AD3Y-W-5K=
    L-ISE-AD5Y-W-5K=
    L-ISE-W-3UPG-5K=
    L-ISE-W-UPG-5K=
    10,000
    10K Endpoints
    L-ISE-BSE-10K=
    L-ISE-ADV3Y-10K=
    L-ISE-ADV5Y-10K=
    L-ISE-AD3Y-W-10K=
    L-ISE-AD5Y-W-10K=
    L-ISE-W-3UPG-10K=
    L-ISE-W-UPG-10K=
    25,000
    25K Endpoints
    L-ISE-BSE-25K=
    L-ISE-ADV3Y-25K=
    L-ISE-ADV5Y-25K=
    L-ISE-AD3Y-W-25K=
    L-ISE-AD5Y-W-25K=
    L-ISE-W-3UPG-25K=
    L-ISE-W-UPG-25K=
    50,000
    50K Endpoints
    L-ISE-BSE-50K=
    L-ISE-ADV3Y-50K=
    L-ISE-ADV5Y-50K=
    L-ISE-AD3Y-W-50K=
    L-ISE-AD5Y-W-50K=
    L-ISE-W-3UPG-50K=
    L-ISE-W-UPG-50K=
    100,000
    100K Endpoints
    L-ISE-BSE-100K=
    L-ISE-ADV3Y-100K=
    L-ISE-ADV5Y-100K=
    L-ISE-AD3Y-W-100K=
    L-ISE-AD5Y-W-100K=
    L-ISE-W-3UPG-100K=
    L-ISE-W-UPG-100K=
    Cisco ISE Functionality-Based License Options
    License Type
    License SKU
    Base License
    L-ISE-BSE-[T]=
    Advanced 3-Year License
    L-ISE-ADV3Y-[T]=
    Advanced 5-Year License
    L-ISE-ADV5Y-[T]=
    3-Year Wireless License
    L-ISE-AD3Y-W-[T]=
    5-Year Wireless License
    L-ISE-AD5Y-W-[T]=
    3-Year Wireless Upgrade License
    L-ISE-W-3UPG-[T]=
    5-Year Wireless Upgrade License
    L-ISE-W-UPG-[T]=
    Replace [T] with the appropriate license tier from Table 5 and 6.
    Jatin Katyal
    - Do rate helpful posts -

  • Cisco ISE 1.2 Ise Application doesn´t install

    Hello,
    I am trying to install Cisco ISE on a VMWare Paltform, and the installation goes OK for the ADE-OS (The Os is installed, but the ISE application doesn´t install.
    Any Hint in how to solve that ?
    BR,
    Julio

    Hi all,
    Thank for your answers, the problem was that the ISO image on the Cisco software repository was corrupted. I finally did a md5 check, and downloaded the image 4 times.
    The for images download matched the md5 checksums between themselves, but not the Cisco webpage. Finally a TAC engineer had to publish the image form me, and when downloaded from this link It matched the CCO md5 and it worked fine.
    BR,
    Julio.

  • Cisco ISE patching find out

    Hi all,
    Would like to find out on patching process on inline posture node.
    My topology is one ISE appliance node type is Admin/Policy Service Node; while another unit is inline posture node.
    Both appliance have the identical software versiona and patch, namely 1.1.3.124, patch 2
    I would like to update it to patch version 4.
    My question:
    01. If i apply the patch on the Admin/Polic Service Node using GUI patch maangement, will this also apply the patch to Inline Posture node?
    02. Or should i use console into Inline Posture node and using CLI way to update the patch? Anything i should mention in this process, example: stop application etc?
    Please advice, million thanks
    Noel

    Resolved Issues in Cisco ISE Version 1.1.0.665—Cumulative Patch 4
    Lists the issues that are resolved in Cisco Identity Services Engine Maintenance Release 1.1.0.665 cumulative patch 4.
    You must deploy this patch on Cisco Identity Services Engine Maintenance Release 1.1.0.665 (with or without patch 1, 2, and 3 applied), otherwise the patch install will fail and Cisco ISE will return an error message stating, "This patch is intended to be installed on ISE 1.1.0.665."
    To obtain the patch file necessary to apply the patch to Cisco ISE Release 1.1, log into the Cisco Download Software site at http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm (you might be required to provide your Cisco.com login credentials), navigate to Security > Access Control and Policy > Cisco Identity Services Engine > Cisco Identity Services Engine Software, and save a copy of the patch file to your local machine. Then refer to the "Installing a Software Patch" section of the "Administering Cisco ISE" chapter of the Cisco Identity Services Engine User Guide, Release 1.1. for instructions on how to apply the patch to your system.
    If you experience problems installing the patch, please contact Cisco Technical Assistance Center.
    Cisco ISE Patch   Version 1.1.0.665—Patch 4 Resolved Caveats
    Caveat
    Description
    CSCui22841
    Apache Struts2 command execution   vulnerability
    Cisco ISE includes a version of Apache   Struts that is affected by the vulnerabilities identified by the following   Common Vulnerability and Exposures (CVE) IDs: CVE-2013-2251. This fix   addresses the potential impact on this product.
    Managing Software Patches
    You can install patches on ISE servers in your deployment from the primary administration node. ISE patches are usually cumulative; however, any restrictions on the patch installation will be described in the README file that will be included with the patch. Cisco ISE allows you to perform patch installation and rollback from either the command-line interface (CLI) or GUI.
    Standalone Deployment
    When you install or roll back a patch from a standalone or primary administration node, ISE restarts the
    Application. You might have to wait for a few minutes before you can log back in.
    Distributed Deployment
    When you install or roll back a patch from the primary administration node that is part of a distributed deployment, Cisco ISE installs the patch on the primary and all the secondary nodes in the deployment. If the patch installation is successful on the primary node, Cisco ISE then proceeds to the secondary nodes. If it fails on the primary node, the installation is aborted. However, if the installation fails on any of the secondary nodes for any reason, it still continues with the next secondary node in your deployment.
    Installing a Software Patch.
    Please check the below link for step by step installation.
    http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_admin.pdf

  • MAC OS X unable to download Cisco ISE supplicant agent

    Hi,
    I have a problem with MAC OS X clients unable to download the Cisco ISE supplicant agent using Safari browser but able to login on the ISE guest portal. If the same client was to login to the ISE guest portal using Firefox; it has no issues downloading the ise supplicant and posture agent.
    I have tried to update the Java version on the client to the latest; however it does not resolve the issue. As I am new to MAC OS clients; I was wondering what may be the cause of the issue?
    I have summarized the issue as follows:
    1. MAC OS X 10.8 with safari 6 -- unable to download agent but can login successfully on the Cisco ISE guest portal
    2. MAC OS X 10.8 with Firefox -- able to login to Cisco ISE guest portal and download agents; no issues
    3. MAC OS X 10.7 with safari and firefox ---  unable to download agent but can login successfully on the Cisco ISE guest portal
    4. Windows XP & Windows 7 & Iphone/Ipad/Android -- able to login/download agent without any issues
    Any suggestions is appreciated.
    Thanks.

    For Agent Download Issues on Client Machine
    • Ensure that a client provisioning policy exists in Cisco ISE. If yes, verify the
    policy identity group, conditions, and type of agent(s) defined in the policy.
    (Also ensure whether or not there is any agent profile configured under Policy >
    Policy Elements > Results > Client Provisioning > Resources > Add > ISE
    Posture Agent Profile, even a profile with all default values.)
    • Try reauthenticating the client machine by bouncing the port on the access
    switch.
    Remember that the client provisioning agent installer download requires the following:
    • The user must allow the ActiveX installer in the browser session the first time an agent is installed
    on the client machine. (The client provisioning download page prompts for this.)
    • The client machine must have Internet access.
    Client Machine Operating Systems and Agent Support in Cisco ISE
    Check the following link
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html#wp95449

  • Cisco ISE: Error 5411 No response received ...

    Hi all,
    we've been running Cisco ACS version 4.x half a year ago, but decided to upgrade to Cisco ISE. So we've made a fresh installation with our cisco partner. At the moment we're live with this equipment, but running in a lot of troubles, as we're receiving a lot of those errors each day. Once the users restart their PCs a few times the problem is solved, but at the moment its pretty annoying:
    No response received during 120 seconds on last EAP message sent to the client
    Steps from the detailed view:
    11001  Received RADIUS Access-Request
    11017  RADIUS created a new session
    Evaluating Service Selection Policy
    15048  Queried PIP
    15048  Queried PIP
    15004  Matched rule
    11507  Extracted EAP-Response/Identity
    12500  Prepared EAP-Request proposing EAP-TLS with challenge
    12625  Valid EAP-Key-Name attribute received
    11006  Returned RADIUS Access-Challenge
    5411  No response received during 120 seconds on last EAP message sent to the client
    Allowed Protocol: EAP-TLS and PEAP
    Authentication Protocol : EAP-TLS
    Actually I don't know which version we're running. Where can I check the proper release once on the webinterface?
    Switches are 3750x with the following switchport configs (some things has been xxx-out), Firmware is Version 12.2(55)SE1:
    interface GigabitEthernet1/0/1
    description xxx
    switchport access vlan xxx
    switchport mode access
    switchport voice vlan xxx
    srr-queue bandwidth share 10 10 60 20
    queue-set 2
    priority-queue out
    authentication event fail action next-method
    authentication event server dead action authorize vlan xxx
    authentication event no-response action authorize vlan xxx
    authentication event server alive action reinitialize
    authentication host-mode multi-domain
    authentication order dot1x mab
    authentication priority dot1x mab
    authentication port-control auto
    authentication periodic
    authentication timer reauthenticate 28800
    mab
    mls qos trust device cisco-phone
    mls qos trust cos
    macro description cisco-phone | cisco-phone
    dot1x pae authenticator
    dot1x timeout tx-period 15
    dot1x timeout supp-timeout 15
    auto qos voip cisco-phone
    spanning-tree portfast
    spanning-tree bpduguard enable
    service-policy input AutoQoS-Police-CiscoPhone
    Can someone introduce anything to solve the problem, maybe some misconfiguration or improvements before starting a TAC-Case.
    Thanks in advance
    regards
    Marc

    The Global Help icon is located in the bottom left corner of the Global  Toolbar in the Cisco ISE window. You may check the ISE version there.
    To launch Global Help, complete the following steps:
    Step 1 On the global toolbar, move your cursor over the Help icon.
    Step 2 Choose Online Help from the pop-up menu.
    A new browser window appears displaying the Cisco ISE Online Help.
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • New Cisco ISE 1.3 software on IBM x3250 series ?

    Hi All,
    i need clarifications concerning those three questions :
    -              As the Cisco ISE 1.3 is released few days ago, is it possible to install it on another hardware vendor like IBM x3250 series?
    -              If yes how we will manage with smartnet contract ?
    -              What the ISE SNS Accessory Kit contain exactly ? indeed we are building ISE solution and need to see if UCSC-RAIL1= and N20-BKVM= are already included in ISE-SNS-ACCYKIT. 
    thks
    Jules

    1. You can install ISE on an ESXi server meeting the hardware requirements. You cannot install it on a 3rd party server "bare metal" installation. (At least not in any supported manner.) Reference.
    2. Your software license entitles you to support on the software in a virtual environment. The hardware is handled between you and your preferred hardware vendor or support company.
    3. The rails and KVM adapter should be included in the Accessory Kit.

Maybe you are looking for