ISE 1.2 network device editing

I have upgraded to ISE 1.2 and the latest patch and noticed a bug where editing network devices, you are unable to save changes as the "Save" button is greyed out. It also appears to have SNMP unchecked for all devices even though there is configuration for them.

Hi
Make sure that you have defined Security Group Access (SGA)-enabled devices in Cisco ISE to process requests from SGA-enabled devices that can be part of the Cisco SGA solution. Any device that supports the Security Group Access solution is an SGA-enabled device.
SGA devices do not use the IP address. Instead, you must define other settings so that SGA devices can communicate with Cisco ISE.
If you are importing network devices from previous release then You cannot import network devices in Cisco ISE, Release 1.2 that are exported in previous Cisco ISE, Releases 1.1 and 1.1.x as the import template for these releases are different.
You can import a list of device definitions into a Cisco ISE node using a comma-separated value (CSV) file. You must first update the imported template before you can import network devices into Cisco ISE. You cannot run an import of the same resource type at the same time. For example, you cannot concurrently import network devices from two different import files.

Similar Messages

How to import network devices on ISE 1.2

Hi, experts,
I'm trying to import network devices on ISE 1.2.0.899
so I downloaded the template and opened with notepad and wrote all the nessesarry information.
and I tried to upload to ISE, and it just said import failed. no reason..
does anyone know how to do it ?

Hi jiyoung
This import failed error might occur due to following reasons so please make sure that :
You are not running two import jobs of the same resource type at the same time. For example, you cannot concurrently run two import jobs to import network devices from two different import files.
More over please make sure that while configuring the network devices you are performing job from a super admin or network device admin group.
Best Regards:
Muhammad Munir
Hi, experts,
I'm trying to import network devices on ISE 1.2.0.899
so I downloaded the template and opened with notepad and wrote all the nessesarry information.
and I tried to upload to ISE, and it just said import failed. no reason..
does anyone know how to do it ?

Multiple Network Device Groups when importing to ISE using template

I have a question about importing a group of network devices into ISE using the template provided. The template only has a single column for Network Device Groups - is there a way to import devices and include more than one NDG? For instance, the NDG's we use are "Device Type" and "Location". I'd like to include both when doing my import and I've tried multiple ways to seperate the two strings within the column (comma's colons, semi-colons, spaces, pipes, tabs, etc), but i always get an error message that "NDG group does not exist". I also tried adding a new column into the template, but that just plain failed to import.
If there is any way to do this, I would appreciate any advice on how - I have to add about 40 devices per week to our ISE deployment and I'd rather not have to go in and add any parameters manually if it can be helped. Thanks very much!
Ross
BTW, we are running ISE ver 1.1.2 in case it is relevant.

Yes, you can do it. You have to use the pipe "|" to separate the groups. But please notice you must create the network device groups in advance.
For example, I have the following groups in my csv file to import a lot of network devices
Device Type#All Device Types#SWITCHES#375O-X|Location#All Locations#PERU#LIMA
But as a pre-requisite I have to create the network device groups.
If you have lots of network device groups, you can mass import them instead of creating them one by one.
Please rate if it helps

ISE Could not locate Network Device or AAA Client

When authenticating using 802.1x and MAB, I recieve an authentication failure with the error 11007(Could not locate Network Device or AAA Client). The root cause that ISE spits back at me is "Could not find the network device or the AAA Client while accessing NAS by IP during authentication." I did pretty much everything by the book except instead of using a loopback interface I used a vlan with a defined ip address. Could this be causing the problem?
Here is the config of the port that I'm testing on:
interface GigabitEthernet1/0/9
switchport access vlan 9
switchport mode access
switchport voice vlan 8
ip access-group ACL-ALLOW in
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
authentication event fail action next-method
authentication event server dead action reinitialize vlan 4
authentication event server dead action authorize voice
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication violation restrict
mab
mls qos trust device cisco-phone
mls qos trust cos
dot1x pae authenticator
dot1x timeout tx-period 10
auto qos voip cisco-phone
spanning-tree portfast
service-policy input AUTOQOS-SRND4-CISCOPHONE-POLICY
end

I can ping both the vlan and the endpoint from the ISE. As far as allowing ISE to speak snmp and RADIUS to the NAD, I have enabled it on the NAD config inside the ISE. I have also double checked the snmp and radius shared passwords.
I have gotten MAB authentication to work but I am still getting the same error for dot1x authentication. Here are some of the configs on the switch.
aaa new-model
aaa authentication dot1x default group radius
aaa authentication dot1x defualt group radius
aaa authentication dot1x group group radius
aaa authorization network default group radius
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
aaa session-id common
ip radius source-interface TenGigabitEthernet1/0/1
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server host 10.10.10.47 auth-port 1812 acct-port 1813 test username test key 7 097940581F5412162B464D
radius-server vsa send accounting
radius-server vsa send authentication
dot1x system-auth-control
authentication order dot1x mab
authentication priority dot1x mab
dot1x pae authenticator
dot1x timeout tx-period 10

ISE Failed to Create Network Device Error

I am trying to add new network device to a new out of the box ISE 3315 appliance under the Administration > Network Resources section. I was able to do this the other day but now when I try I get an error that says "Failed to create network device. System Error!
Any ideas? I tried a reboot, and Iam pretty certain I was able to do this a few days ago. Its a lab device so only I have touch it. Only other thing I can think to add is that I am running on an eval license until my regular licenses arrive. From what I see I have 81 days left on my base and advance package eval licenses.

Is there a certain amount of AAA client for that eval license?
Thanks,
Scott Fella
Sent from my iPhone

Adding Network Devices to ISE?

The documents on this seem unclear.
I am working on a new deployment of ISE and am having difficulties adding the network devices to it.
When I add the first device I have no issues, using the devices ip address (not loopback) and a mask of 192.
When I try to add a second device using its ip address (again not a loopback) and the network mask of 192, I get an error message indicating "given ip subnet overlaps with the exisitng network: device A (example).
My question is this what mask am I suppose to use for the devices I am trying to add to ISE if I do not have loopback addresses?

Hi,
If you want to add a single device eventhough it is not a loop back just use /32.
You're right, they don't mention anything on the documentatioin.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html#wp1053234
They do however say look at this document:
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html#wp1058492
–You can define a specific IP address, or a range with a subnet mask.
–You cannot define two devices with the same specific IP addresses.
–You cannot define two devices with the same IP range. The IP ranges must not overlap either partially or completely.

ISE integration with Mobile Device Management ( MDM ) help required

Dear Techies,
     Am here bring to your notice an different issue and no much resources to support even in PEC or Cisco Document.
     We are conduction a Proof Of Concept (PoC) on Secure Bring Your Own Device ( BYOD ) using Cisco ISE and gonna test all the scenarios like Wired, Wireless and VPN user access.
Setup Brief :
=========
      Our Setup has ISE VM acting as Admin, Monitor and Profiling Device, we have NAC 3315 physical Appliance as Inline posture Device, Wireless LAN controller, Access point and the Identity source as Microsof Active Directory
     Having Plans to Integrate Mobile Device Management ( MDM ) and Citrix VDI setup also.
Activity Brief:
=========
     As of now we have tested the Wired Scenario Authentication and authorization for guest users and gonna carry out the profiling and posture.
Clarifications Required
================
Wired Scenario - Require some configuration / steps on how to carryout posture for the guest wired users i.e. LAPTOP.
Wireless Scenario
MDM can be integrated to ISE ?
How the MDM can be integrated to Cisco ISE configuration or Guide to show the same?
What is the demarcation between MDM and ISE ( i.e. What is the role of ISE and MDM on Mobile Devices ) ?
If MDM is available so then when the control of ISE ends, does MDM do management or ISE will do management of the devices ?
Is MDM will do client provisioning or ISE should do ?
Is MDM send or update patches of Mobile Devices ?
As of now these are the scenarios, kindly revert if any good documents to show this or share your expertise on the Integration Part.
Thanks for Reading...
Arun

I would like to avail your valuable inputs to understand on the Client provisioning part for the Mobile Devices/ Laptop. I understand from your reply that MDM integration is not available in the current release ISE 1.1 - That is correct.
Kindly let me know your views or any documents on the following scenarios with the current release in mind
1. User with Mobile devices connecting to Wireless ( both Employee and Guest ) , How the Flow differs for the Employee and Guest. How the client provisioning is done ( i.e. Like Posturing or Compliance Check ).
The posturing and compliance check is done based on the user authentication information (i.e. AD memberOf vs Guest user) combined with the users endpoint (windows, mac osx, or a mobile device), ISE then has a few decisions to make based on the authorization policies. For example, if a Domain User coming from a Windows 7 machine joins the network, then can either use the nac agent, or the web agent. Then you can scan for registry settings, file settings, program requirements, hotfix compliance...and the list goes on. If the user fails a check then you can either assign an acl for the user so they only have guest access, or you can place them into a remediation vlan the options are entirely up to the requirements and however the solution is implemented.
2. User with Laptop connecting to Wireless ( both Employee and Guest ). How the client provisioning is done ( i.e. Like Posturing   or Compliance Check ).
Guests are usually redirected to the guest portal which they authenticate and their user group falls within the Guest container that is on the ISE internal database, that is usually coupled with an authorization profile that grants them internet access. For the client provisioning, that is usually done based on the operating system, via profiling (dhcp, and user agent string., netmap...etc) and can be fine tuned for all laptops or to a specific set of users based on their group membership.
3. What are advantages of having ISE also in place for Mobile devices, since most of the Mobile related tasks ( like Authentication, Authorization, Profiling and Posture ) are carried out by MDM. I am checking for the significant advantage of having ISE for Client network having only Mobile devices. Kindly clarify.
Currently the advantage of Cisco ISE is that it supports profiling within wireless and really fits well within a network that has mostly Cisco products since they are all part of of the Borderless security initiative being driven on the backend. The product teams for wireless, wired, security (vpn..etc) and ISE are pretty close in building their solutions so that you can get connected with any device any where (sorry for the sales pitch). The latests wireless code is improving and is going to have support similar to the ios sensor for wired devices where dhcp, cdp, and other attributes can be sent in the radius packet for better profiling decisions. With integration for an MDM platform coming soon, and also support for TACACS rumored (have to verify with your account rep) you have options that really stand out from a unit that only supports MDM. Cisco ISE also comes with a wireless product ID so that makes the budget work when it comes to deploying ISE if you arent looking for enforcement on your wired devices.
4. Do you recommend 802.1X Authentication to use for the Employee and Contractor? The Guest user authentication as Open ?
For internal users and vendors the best option by far is dot1x, almost all operating systems are capable of performing dot1x and the 1.1.1 MR has a piece now that can provision the supplicant for the users, by using scep to enroll certificates or configure peap settings.
There is a feature within the guest portal that allows you to statically assign guests into endpoint group, that feature is called device registration web authentication. It seems like an open network but uses mac filtering to assign these devices to an endpoint without requiring users to enter any credentials. They are presented with an AUP page, once they accept their mac address is mapped to the endpoint group
5. How can we ensure the Encryption of traffic from the Guest user to the NAD ( Network Access devices ) ?
This may be a wireless question but I am sure the encryption is done using AES and using dot1x as the key management here is a brief background for this - http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807f42e9.shtml#L2
You can also use the anyconnect client which can provide macsec which is layer 2 encryption for wired - http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/qa_c67-622477_ns1049_Networking_Solutions_Q_and_A.html
6. We are also looking for VDI ( Citrix, VMware ) solution for the client ( both Employee and Guest ) , how ISE can play a role in securing the VDI environment.
For most thin clients you can perform dot1x authentication on the device itself, however that is something the manufacturer will have to support. This is a little gray for me.
7. Is that any integration required with Citrix or VMware. How the VDI can be offered based on the User role ( i.e. Employee, Contractor or Guest ), since Guest database is available only with ISE, how the checks are made from the VDI environment.
IN ISE there is an identity sequence which can authenticate users in AD first, if the user is not found then it can look in the internal database.
Our solution demands MDM in the integrated solution, As on today ISE cant be integrated with MDM. so what kind of solution we can propose to have MDM and Cisco ISE .Do the clients now enter the network should have already installed the MDM agent (or) any other way of pushing the same to the Client.
Today there is no integration between the devices, the last release time I heard was December for this feature. However it would be best to confirm with your Cisco Account rep on this issue.
Thanks,
Tarik Admani
*Please rate helpful posts*

ISE Profiling for Wireless Devices (WLC 5508) like Laptops and Mobile Devices

Hi,
We have integrated WLC 5508 to cisco ise 3315 with ios 1.1.1 and using Guest Sponsor portal for wireless guest users.
Where we have created open ssid in wlc and redirect web login portal in wlc for guest users. We have enable all respective node in policy service for profiling and also configure snmp in wlc as well as in ise.
When guest user is connected to open ssid its get redirected to web login page of ise portal and when it gets login we are only able to see the username which guest user login but not the end device in monitoring log.
Wireless End devices are not able to get profiled can any one tell me what configuration I need to do on ise or wlc side to profiled end guest wireless device like android,iphone and laptops
Thanks
Pranav

Hi Tarikh,
I only want to identify the end devices for wilress guest user. I have configured MAB Authentication and configure autorization policy where in mention identity group any condition as wlc web authentication and athorization profile only guest mentioning plain access for the same.
Can you help me how I can achived profiling for wirless guest devices. I have configured all profiling probes . Enable snmp on wlc as well as in network devices.
What else I need to configured to achived just identiting device nothing but profiling and which should reflect in authnetication logs.
Thanks
Pranav

Range expander not displayed in network device list from Router

My range expander seems to be working properly, blue lights, and improved signal in dead zone. However, I noticed when viewing my network devices from the router settings it did not list anything located at 192.168.1.240. I was wondering why that would be when the expander is working properly? Shouldn't the router show it as a connected device?
Thanks.
Solved!
Go to Solution.

I wouldn't worry about it. Mine doesn't either. I assume because it is set up like the router as a repeater that it is kinda like a "ghost". I know it is there because I can ping it and access it at 192.168.1.240 in the browser. If you want, you can download the LELA network management software. That will pick it up.
Message Edited by Luckydog on 01-30-2009 05:53 AM

[solved] Kernel 3.6.2-1 stole my network devices (atheros AR8161)

# lspci
01:00.0 Ethernet controller: Atheros Communications Inc. AR8161 Gigabit Ethernet (rev 08)
02:00.0 Network controller: Broadcom Corporation BCM4313 802.11b/g/n Wireless LAN Controller (rev 01)
Before the kernel update via pacman -Syu both were working. Admittedly it took quite some time to get there as the install medium did not provide any working drivers for the ethernet and the wifi was very unstable, disconnecting every few seconds. Anyway, I got through the installation, I managed to wget the compat-wireless-3.5.4-1-snpc and install them and from there on I could go ahead and install the broadcom-wl drivers from the AUR and thus get both the ethernet as well as wlan working (even though the wlan showed up as eth1 instead of wlan0).
Now, after the kernel update ifconfig -a shows neither of my networking devices. lspci still lists the hardware. Fruther:
#ip link set eth0 up
Cannot find device "eth0"
Same goes for wlan0 and eth1.
There is probably an easier solution to this than downgrading the kernel, but since I'm still not very comfortable with systemd and the way services are handled, I have no idea how to proceed or what I could look for. Any help is very much appreciated, thanks.
edit: marked topic as solved
Last edited by venehan_snakes (2012-10-15 15:52:19)

I will try to rebuild them, thanks for the hint. I also just noticed this:
>Please be aware that the releases below contain code from the given version of the Linux kernel. Therefore to add functionality, you should select a version that is later than your kernel version.
From: http://linuxwireless.org/en/users/Download/stable/
So, I guess I should not use the same compat-wireless-3.5.4-1-snpc again but a newer version, or is that of little importance? I rather ask now before I do more damage.
Last edited by venehan_snakes (2012-10-15 14:55:37)

Error importing network device using CSV file

While importing a CSV file of a single network device, I am getting this error:
Value for attribute TrustSecDeviceID is Mandatory
In the CSV template (downloaded from ISE web gui), I don't see a field TrustSecDeviceID. What is the error referring to?

Kashish,
This looks like a bug but I attached a template that you can use and i tested with my ise 1.1.1 patch 1 and it worked fine, just replace the fields that I entered and you should be good to go! Were you able to get the password reset successfully on the PSNs?
Good luck!
Tarik Admani
*Please rate helpful posts*

11007 could not locate network device or aaa client

Dears,
I have two redundant WLC and two ISE configured as primary and secondary.
I configured the Dot1x and users authenticated successfully, but my issue that i'm still receiving this error message (11007 could not locate network device or aaa client).
Any ideas or suggestions highly appreciated,

ISE NAD Import via CSV passes with invalid IP, unable to load NAD config
CSCur65990
Description
Symptom:
RADIUS requests dropped due to failure reason "11007 Could not locate Network Device or AAA Client", even though they are successfully loaded in ISE.
Conditions:
Issue with Network Device import via CSV.
Known Affected Releases:
(2)
1.2(0.912)
1.3(0.876)

Iwl3945 failed to register network device archlinux

Hi, i just install ArchLinux on laptop dell 1420 i follow the tutorials of the official documentations.
But i hace a small problem with the wireless. My laptop have an Intel 3945 wifi card so i install teh module iwl-3945-udev, i dont add this module in rc.conf file becouse this module in now part of the kernel... but i doesnt owrk.. so i check error log and i found this:
Feb 9 21:54:24 pichirilo iwl3945: Failed to register network device (error -12)
And the rc.conf is:
# /etc/rc.conf - Main Configuration for Arch Linux
LOCALE="en_US.utf8"
HARDWARECLOCK="localtime"
USEDIRECTISA="no"
TIMEZONE="Canada/Pacific"
KEYMAP="us"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
MOD_AUTOLOAD="yes"
MODULES=(tg3 mac80211 snd-mixer-oss snd-pcm-oss snd-hwdep iwl3945 snd-page-alloc snd-pcm snd-timer snd snd-hda-intel soundcore)
USELVM="no"
HOSTNAME="pichirilo"
eth0="dhcp"
INTERFACES=(eth0,wlan0)
ROUTES=(!gateway)
DAEMONS=(syslog-ng network netfs crond alsa hal fam kdm)
i try to add the module manually but i have the same result...
any idea ???
Thanks
Last edited by dilaang (2009-02-10 05:53:43)

No luck...removed iwl3495 from rc.conf still no luck..
[root@muttai ~]# lsmod | more
Module Size Used by
i915 67208 2
drm 108768 3 i915
ndiswrapper 249600 0
joydev 14208 0
uvcvideo 62344 0
compat_ioctl32 11520 1 uvcvideo
videodev 37888 2 uvcvideo,compat_ioctl32
psmouse 57116 0
sdhci_pci 10624 0
sdhci 19588 1 sdhci_pci
btusb 15768 0
i2c_i801 12444 0
iTCO_wdt 15184 0
sg 31840 0
serio_raw 8196 0
mmc_core 54624 1 sdhci
i2c_core 26144 1 i2c_i801
iTCO_vendor_support 5636 1 iTCO_wdt
v4l1_compat 17284 2 uvcvideo,videodev
bluetooth 60836 1 btusb
video 22420 0
output 5248 1 video
intel_agp 33136 1
wmi 8896 0
dcdbas 10928 0
thermal 20896 0
processor 46648 3 thermal
fan 7304 0
button 9504 0
battery 14600 0
ac 7176 0
fuse 59584 2
evdev 13984 16
snd_seq_oss 35584 0
snd_seq_midi_event 9344 1 snd_seq_oss
snd_seq 58336 4 snd_seq_oss,snd_seq_midi_event
snd_seq_device 9364 2 snd_seq_oss,snd_seq
snd_hda_intel 531124 1
snd_hwdep 10632 1 snd_hda_intel
snd_pcm_oss 45440 0
snd_pcm 82952 2 snd_hda_intel,snd_pcm_oss
snd_timer 24720 2 snd_seq,snd_pcm
snd_page_alloc 11792 2 snd_hda_intel,snd_pcm
snd_mixer_oss 18944 1 snd_pcm_oss
snd 65096 11 snd_seq_oss,snd_seq,snd_seq_device,snd_hda_inte
l,snd_hwdep,snd_pcm_oss,snd_pcm,snd_timer,snd_mixer_oss
soundcore 9632 1 snd
rtc_cmos 14040 0
rtc_core 21060 1 rtc_cmos
rtc_lib 4992 1 rtc_core
usbhid 41536 0
hid 49856 1 usbhid
ext3 141328 5
jbd 57000 1 ext3
mbcache 10244 1 ext3
dm_mod 62704 0
ohci1394 34612 0
ieee1394 91392 1 ohci1394
sr_mod 18884 0
iwl3945 103416 0
rfkill 13776 1 iwl3945
cdrom 39080 1 sr_mod
mac80211 182960 1 iwl3945
led_class 6280 1 iwl3945
sd_mod 29096 7
tg3 133124 0
libphy 22656 1 tg3
cfg80211 36896 2 iwl3945,mac80211
uhci_hcd 27552 0
ehci_hcd 41356 0
usbcore 160432 7 ndiswrapper,uvcvideo,btusb,usbhid,uhci_hcd,ehci_
hcd
ata_piix 27652 0
ahci 36876 6
ata_generic 8068 0
pata_acpi 7296 0
libata 176352 4 ata_piix,ahci,ata_generic,pata_acpi
scsi_mod 119256 4 sg,sr_mod,sd_mod,libata
[root@muttai ~]# iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
[root@muttai ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:1C:23:FC:D7:1B
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:17
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:280 (280.0 b) TX bytes:280 (280.0 b)
[root@muttai ~]# modprobe -r iwl3945
[root@muttai ~]# modprobe iwl3945
[root@muttai ~]# iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
wmaster0 no wireless extensions.
wlan0 IEEE 802.11abg ESSID:""
Mode:Managed Frequency:2.412 GHz Access Point: Not-Associated
Tx-Power=0 dBm
Retry min limit:7 RTS thr:off Fragment thr=2352 B
Encryption key:off
Power Management:off
Link Quality:0 Signal level:0 Noise level:0
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0
[root@muttai ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:1C:23:FC:D7:1B
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:17
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:280 (280.0 b) TX bytes:280 (280.0 b)
[root@muttai ~]#

Support for Network Devices

Hi All,
I am working on the network evaluation for a client environment and was looking for using Prime Infra as a solution for Network management. I see that following devices are not listed in the support matrix. Can someone help me to understand if this can be monitored and managed in cisco prime Infra 2 ?
Cisco 2248
cisco 4948
cisco 4300
cisco 3745
cisco ASA FWSM
Cisco WS-C4948
Cisco C3550-48
Cicso C3550-24
Cisco C4006
Cisco WS- CBS3020-HPQ
Cisco WS-CBS3120X-S
Cisco WSX 5302
Skr...

What version of ISE are you on? There isnt a maximum number of network devices listed anywhere but I am sure that exceeding 500 is no where near the threshold. What has worked for me in the past is adding one device manually and exporting that device using the csv method and use that csv to add the other devices ip address and copy and paste the same columns.
It could be something as simple as missing a field where the UI isnt catching or an undocumented issue that are hitting.
Thanks,
Tarik Admani

ACS web interface hangs on Network Device Group

We are facing problem of ACS web interface stop responding whenever a Network Device Group is edited/added/deleted. This happens regardless of whether the web interface is opened remotely or on the ACS server.
The session needs to be killed and then have to wait several minutes before attempting to edit NDG (although new session to ACS can be opened up almost immediately).
I have checked there are no proxy settings in the browser, no firewall in between, etc.
ACS is installed on Windows 2003 Server Enterprise Edition with SP1.
ACS installation on another server of same hardware specs and java version works fine. The difference is that the OS on the working ACS is Win 2K3 Ent Ed. without SP1. However, according to Cisco, WIN 2K3 Ent Ed with SP1 is a supported platform.
My ACS version is 4.0(1) build 27.
Any ideas?

I assume you have a java runtime installed?
alas in the "old days" you could troubleshoot this type of thing by looking in the windows registry. This is all internal to the ACS SQLAnywhere DB now :(
Darran

ISE 1.2 network device editing

Similar Messages

Maybe you are looking for