ISE v1.1.1 Network Setup Assistant errors

Hello Everyone.
I've been having some difficulties with ISE v1.1.1 while setting up and testing the SISE course. It's setup so that BYOD users can self-service a guest account with the ISE and register their device. After that the Network Setup Assistant (NSA) is supposed to push the certificates to the system and make it able to access the network. My problems are two fold in is situation. Firstly I have a second interface setup without a gateway for RDP access that the NSA seems to select everytime for the interface it wants to setup, I've bypassed this for the time being with direct access to the machine.Is there a way to direct the NSA to the correct interface? Secondly Once the NSA is running, it will push the RA certificate to the machine and then immediately goto an error that the NSA cannot setup the network. I cannot find an error code on the NSA agent nor can I find a log to help me pinpoint the error the NSA encountered. Any ideas or help I can recieve with this will be appricated.
As far as I can tell the cwa and nsp redirects are working as intended. The Switch for Dot1x downloads the correct dACLs and the authorization profiles are placed correctly
Thank you.

Open Java Control Panel, click the Advanced tab, go to Perform certificate revocation checks on and select Do not check

Similar Messages

ISE BYOD Android : Impossible to launch "Network setup assistant"

Hello
The Byod procedure fails when launching "Network setup assistant"
Error message is: "This profile could not be downloaded, are-you connected to Guest Portal ?"
WLC 5508 (VM) 7.5
Wlan : Flexconnect
Config : AP Flexconnect
ISE 1.3
Android 4.1.2
Here are the step:
1: Rule CWA : Redirect to Guest portal : OK
2: Rule CWA : Redirect to device portal : OK
3: Rule Android_dualSSID : Downloading "Network setup assistant" from Googleplay : OK
4: Rule Android_dualSSID : Launch "Network setup assistant 1.2.40" : NOK
Note : Profile "CWA_GooglePlay" = Redirect-ACL (NSP-ACL-Google)
The NSP-ACL-Google looks like:
(Taken from Flexconnect AP):
Extended IP access list NSP-ACL-Google
    10 permit ip any host <IP ISE>
    20 permit ip host <IP ISE> any
    30 permit udp any range 0 65535 any eq domain
    40 permit udp any eq domain any range 0 65535
    50 permit ip any 74.128.0.0 0.0.255.255
    60 permit ip 74.128.0.0 0.0.255.255 any
    70 permit ip any 173.194.0.0 0.0.255.255
    80 permit ip 173.194.0.0 0.0.255.255 any
    90 permit ip any 206.111.0.0 0.0.255.255
    100 permit ip 206.111.0.0 0.0.255.255 any
    110 permit ip any 74.125.0.0 0.0.255.255
    120 permit ip 74.125.0.0 0.0.255.255 any
    130 permit ip any 208.117.224.0 0.0.0.255
    140 permit ip 208.117.224.0 0.0.0.255 any
    150 permit ip any 216.12.120.0 0.0.0.255
    160 permit ip 216.12.120.0 0.0.0.255 any
    170 deny ip any any
Could you please help
Michel Misonne

Hello
We use the one describe in "Cisco Unified Access (UA) and Bring Your Own
Device (BYOD) CVD"
I tried also with this one:
Extended IP access list NSP-ACL-Google
    10 permit ip any host 10.35.124.195
    20 permit ip host 10.35.124.195 any
    30 permit ip any host 10.35.65.4
    40 permit ip host 10.35.65.4 any
    50 deny ip any 72.163.1.0 0.0.0.255
    60 permit ip any any
10 : ISE
20 : ISE
30 : DNS
40 : DNS
50  :Enroll.cisco.com= 72.163.1.80 ( To redirect the Network setup assistant to ISE)
(Enroll.cisco.com is the adresse that the Network setup assiatnt is tryiong to connect)
Regards
Michel

ISE cannot push the profile to the cisco network setup assistant?

We have tried a few android devices with version 4.2+ but still got the error message ‘Unable to download profile.(Have you logged into the guest portal?)’ as shown at the bottom picture.
In fact, we are connecting the devices to an open SSID which performs MAC filtering, then redirect to CWA and login with AD credentials,
then redirect to Google play store and can successfully download the network setup assistant.
Could you please advise the possible reasons that would cause this error message and make ISE cannot push the profile to the cisco network setup assistant?

Here's a snipit from the Android spw.log. I see that there is an error trying to verify the hostname. Is it possible that this is caused by a non-trusted certificate? I'm using the self-signed cert built into ISE. I have an entry in the public DNS for guest.domain.com that resolves to the IP of my ISE server accessible from the guest subnet. I'm allowing all traffic from the guest VLAN to the ISE vlan on the firewall and all traffic to/from the ISE server in the provisioning ACL I have applied by ISE on the WLC during native supplicant provisioning. I know that guests can communicate with the ISE server since regular guest portal redirection works, just not the network setup assistant. I've renamed the domain to domain.com in this snipit.
2014.07.20 23:44:48 INFO:verion :4.4.4 SDK Level : 19
2014.07.20 23:44:48 INFO:State :START
2014.07.20 23:44:48 INFO:Starting Discovery
2014.07.20 23:44:48 INFO:Starting ISEDiscoveryAsynchTask
2014.07.20 23:44:48 INFO:DHCP Stringipaddr 192.168.30.110 gateway 192.168.30.1 netmask 255.255.255.0 dns1 208.67.222.222 dns2 208.67.220.220 DHCP server 192.168.30.1 lease 3600 seconds
2014.07.20 23:44:48 INFO:DHCP ipaddress192.168.30.110
2014.07.20 23:44:48 INFO:DHCP gateway192.168.30.1
2014.07.20 23:44:48 INFO:Discoverng ISE http return code :200
2014.07.20 23:44:48 INFO:ISEServer =guest.domain.com
2014.07.20 23:44:48 INFO:session =0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Discovered using gateway :18786496
2014.07.20 23:44:48 INFO:Discovered ise server = guest.domain.com
2014.07.20 23:44:48 INFO:Discovered client mac = 5C-0A-5B-FC-37-0F
2014.07.20 23:44:48 INFO:Server:Key=guest.domain.com:0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Downloading config fromguest.domain.com
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 ERROR:DownloadprofileAsynchTask
2014.07.20 23:44:48 ERROR:java.io.IOException: Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 ERROR:Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 INFO:Internal system error.
On the ISE side, here is the snippet of logs during the same time as when the android network setup assistant was run.
2014-07-20 23:41:38,586 INFO [DefaultQuartzScheduler_Worker-6][] cisco.cpm.infrastructure.utils.NodeGroupFWUtil -:::::- Applied Firewall rules for node group.
2014-07-20 23:42:35,251 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -:::::- In AbandonedTransactionReaper : MaxActive : 20
0 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 2
2014-07-20 23:42:39,394 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -::::PDPInitialization:- In AbandonedTransactionReaper
: MaxActive : 200 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 0
2014-07-20 23:42:49,765 INFO [DataSourceListener Thread][] api.services.persistance.dao.DistributionDAO -:::::- In DAO getRepository method for HostConfig Type
: ACTIVE
2014-07-20 23:42:56,805 INFO [PDP-Heartbeats-0][] com.cisco.cpm.clustering.MnTClient -::::pdpha:- Removing session 0516a8c00000196f2a95cc53
2014-07-20 23:42:56,806 WARN [PDP-Heartbeats-0][] cpm.nsf.session.impl.SystemStateManager -::::pdpha:- Session 0516a8c00000196f2a95cc53 not found at complete
2014-07-20 23:43:35,441 INFO [portal-http-844314][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:43:35,441 INFO [portal-http-844314][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:43:35,750 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- initializing page definit
ion
2014-07-20 23:43:35,769 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- Created guest theme page
def
2014-07-20 23:44:18,090 WARN [portal-http-844315][] cisco.cpm.guestportal.actions.SelfProvisioningAction -:test:0516a8c000001932f37acc53::guest:- ***BYOD Regi
stration Data***
macAddress: 5C:0A:5B:FC:37:0F
portalUser: test
authStoreName: Internal Users
authStoreGuid: 78954c30-e0f0-11e3-af67-005056bf4689
2014-07-20 23:44:18,113 INFO [portal-http-844315][] com.cisco.epm.jms.AQMessgeHandler -:test:0516a8c000001932f37acc53::guest:- Publishing message for event [T
xnCommit / commit] and message class[class com.cisco.epm.pap.api.transaction.Transaction]
2014-07-20 23:44:18,167 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,168 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,169 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.CoAExecutorService -:test:0516a8c000001932f37acc53::guest:- Issue CoA reauth i
n 2000 milliseconds for sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:18,171 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,172 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,173 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- Created guest theme
page def
2014-07-20 23:44:20,171 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Running CoAReauthTask for
_sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:20,194 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Issue Local CoA for sessi
on 0516a8c000001932f37acc53
2014-07-20 23:44:50,768 INFO [ContainerBackgroundProcessor[StandardEngine[Catalina]]][] cpm.admin.infra.action.SessionCounterListener -:::::- sessionDestroyed
- deducted one session from counter - Session ID - 0FFE9C73C9209D4EE2534558CB8F723B - Session Count - 0
2014-07-20 23:46:58,502 INFO [portal-http-844315][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:46:58,502 INFO [portal-http-844315][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:46:58,693 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:46:58,702 INFO [portal-http-844315][] cisco.cpm.provisioning.cache.FlowStateCacheManager -::0516a8c000001932f37acc53::guest:- Deleted old flow st
ate session with device id 5C-0A-5B-FC-37-0F

Cisco Network Setup Assistant Unable to install the certificate on Android KitKat

Greetings,
I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached.
Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
I have ran the application several times, it keeps returning to this same message.
After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated.

Greetings,
I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached.
Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
I have ran the application several times, it keeps returning to this same message.
After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated.

Cisco Network Setup Assistant with WIndows8

Hi, I'm trying to provisioning on Windows 8(Surface pro)
When the Cisco Network setup Assistant is on, it asks 'network password' while the ssid is wpa2-enterprise.
and I configured as it is on NSP.
Is it a bug ??

Hi,
What version of ise are you on, also what is the windows native supplicant provisioning version? See if the release notes for 1.2 meet your current design.
http://www.cisco.com/en/US/docs/security/ise/1.2/release_notes/ise12_rn.html#wp378491
Thanks,
Tarik Admani
*Please rate helpful posts*

Boot Up & Network Setup Assistant

After booting up my iMac, I always get the Network Setup Assistant dialogue box in centre of screen. Sure, i can close it down, but why does it come up in the first place?
Bill

Go to the Apple menu, choose System Preferences, click the Accounts icon and then click the Login Items tab. If Network Setup Assistant is in the list, remove it.

Is there a way to "turn off" Network Setup Assistant?

Every time I turn on my computer, the Network Setup Assistant runs. No matter what I try, it doesn't ever fully set-up, or go away. Obviously I'm online now, so I don't need to set up a Network.
Is there someway to turn it off or make it stop automatically trying to create a network?

First you can just uncheck them if they are checked if there's nothing there that you want to open when you boot up. Usually there are software programs that you have downloaded
that you might have in your menu bar at bootup.
There might be the Mac HD. Check that if you want the HD window opened after bootup.

Network Setup Assistant runs every time I turn the computer on.

Everytime I turn on my computer, Network Setup Assistant decides that it wants to help me locate and create a new network - which is awfully nice of it. The problem, however, is that it either a) never fully completes because of some failure, or b)doesn't need to happen in the first place because I can access my Airport network without the setup assistant.
Is there any way to turn the Network Setup Assistant off, or at least make is stop trying to help me when I don't need it to?

First you can just uncheck them if they are checked if there's nothing there that you want to open when you boot up. Usually there are software programs that you have downloaded
that you might have in your menu bar at bootup.
There might be the Mac HD. Check that if you want the HD window opened after bootup.

Network Setup Assistant won't recognize my password

Hi There,
new to macs, can't get the Network Setup Assistant to recognize the password that I've typed in. I have several other computers attached to the network, but can't get the mac to. I'm flummoxed. Please help.

Hi ddethomas, and a warm welcome to the forums!
What form of encryption does the Router use, WEP, WPA, WPA2?
Sory to see your 1st post got no answers, it helps to bump it with a reply again to bring it to the top again, but it's archined/vlosed now except to you.

TS3576 LAN option is greyed out in Network Setup Assistant .I have connected this and restarted my system,but still its greyed out.Please help me

Even I have connected to a LAN cable,I am not able to setup a LAN network .Please help me.

Hello cmack4,
Welcome to the forums.
Are you able to connect to a Wi-Fi network and then try to do the update again or are all connection settings grayed out?
-SR
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

ITunes Setup Assistant Error!

Running Windows 7 and Nero 9 and receiving this error when starting newest version of iTunes. "Warning - The registry settings used by the iTunes drivers for importing and burning CDs and DVDs are missing. This can happen as a result of installing other CD burning software. Please reinstall iTunes."
I installed Nero 9 and it's working great. I have uninstalled and reinstalled iTunes several times, and nothing seems to help. Does anyone know which specific registry entries are causing this conflict or another way to reinstall iTunes successfully? The DVD/CD drive is working perfectly except for iTunes.

"Warning - The registry settings used by the iTunes drivers for importing and burning CDs and DVDs are missing. This can happen as a result of installing other CD burning software. Please reinstall iTunes."
Hmmmm. I've got links to XP and Vista instructions for that, but nothing that specifically says it's for Windows 7.
Here's a link to the Vista instructions, which might help with your investigations ... *but proceed with all due caution!*
[iTunes for Windows Vista: Troubleshooting CD issues caused by device filters|http://support.apple.com/kb/HT2615]

Mac boots to console, AuthorizationRef, Setup Assistant and IFCStart

Hello!
My mac suddenly booted into console only.
The system.log stated 'AuthorizationRef doesn't have a username' and 'ifcstart crashed'.
After reading related posts I renamed local.nidb to local.nidb.bad, to no avail.
The mac just hangs with a blue screen.
system.log states:
(Login.m:1867) Failed to launch /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant (error 5)
crashdump(137): ifcstart crashed
crashdump(142): crash report written to: /Library/Logs/CrashReporter/ifcstart.crash.log
SystemStarter[68): IFC (135) did not complete successfully
crashdump(142): Finder crashed
SystemStarter(68): The following StartupItems failed to properly start:
SystemStarter(68): /System/Library/StartupItems/IFCStart
SystemStarter(68): - executen of Startup script failed
crashdump(142): crash report written to: /Library/Logs/CrashReporter/Finder.crash.log
ifcstart.crash.log:
Command: ifcstart
Path: /usr/libexec/ifcstart
Link (dyld) error:
Library not loaded: /System/Library/Frameworks/Carbon.framework/Versions/A/NavigationSevices.framew ork/Versions/A/NavigationServices
Referenced from: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
Reason: no suitable image found. Did find:
/System/Library/Frameworks/Carbon.framework/Versions/A/NavigationSevices.framew ork/Versions/A/NavigationServices: unknown file type, first eight bytes: ...
German OS X 10.4.11
Permissions repaired.
DiskWarrior reports no critical things.
fsck completes successfully.
removing the caches didn't help.
SetupAssistant is where it should be.
Thanks for any help!

Hi
Can you target disk mode this mac to another mac? If yes then backup any critical data you need. I would not bother copying applications as it would be best if you reinstalled them instead. Thats if there is data already on the drive? The information being logged seems to indicate this is a fresh install? The Setup Assistant can't launch and other bootstrap processes are failing because of this.
Can you boot OK from the Installer disk or does it still go into console when you do try?
If it boots OK simply reformat and reinstall. Its possible that the internal hard drive is having a problem, possibly reformatting the drive may get you over the problem or may an indicate an issue with the drive that a replacement drive will cure. If you are still having problems then maybe it may be a deeper problem. Depending on which mac it is sometimes the IDE or SATA cable that connects the drive to the main board develops a problem. In which case the drive should not require replacing. These sorts of problems are better diagnosed and repaired if you take your mac to your nearest authorized repair specialist. If its under warranty and it turns out to be a warranty repair then you should pay nothing.
Hope this helps, Tony

Printer does not see new network in Setup Assistant - Photosmart C4385

I changed routers, so have a new network SSID. Have pinter connected to a Mac with USB cable. Want to set up wireless access to printer. In HP Setup Assistant the error message first says "No WiFi Network Discovered". I try the option to type in teh name of teh network but receive error message "Network Unavailable - The selected Wi-Fi network "(my network name)" is not within reach of the device. But the printer is only 25 feet from the touter and immediately next to the Mac which is connected to the Wi-Fi network.
In Wireless menu I selected "Wireless Radio ON". TEst configuration page shows Radio On, Radio Working, but Network Name (SSID) Not applicable.

Welcome to the forums!
@spicymac
I would like for you to check out a previous post I had just recently done about a similar issue as yours, when connecting to the network.
Try out the steps I list in this post and let me know the outcome!
Re: HP Photosmart Prem, lost connection to my Mac, cannot reinstall
Have a great day
R a i n b o w 7000I work on behalf of HP
Click the “Kudos Thumbs Up" at the bottom of this post to say
“Thanks” for helping!
Click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution!

I am a OS10.7.4 user. yesterday i bought a Lacie external hard disk but error message appear said " You cant open the applicant LaCie setup assistant because PowerPC applicants are no longer support". please help me how to connect my mac with Lacie??

i am a OS10.7.4 user. yesterday i bought a Lacie external hard disk but error message appear said " You cant open the applicant LaCie setup assistant because PowerPC applicants are no longer support". please help me how to connect my mac with Lacie??

You do not need the Setup Assistant; in fact, you do not need any software on an external hard drive. I have two LaCie's; I erased the drive as soon as I plugged it in. You will need to format it anyway because most hard drives come Windows formatted. So, if you only want to use it with the Mac, highlight it in Disk Utility and choose Mac OS Extended (Journaled) as the format and the GUID Partition scheme under Options. While doing that, it will erase the drive (and get rid of the LaCie software) - once finished, your drive is ready to use for Time Machine or any other backup plans you have for it.

Wireless network working, but airpot setup assistant was not done

hi there!
i was trying to set-up my wireless network using an airport base station.
i have a DSL connection with our PC & AOL is the ISP.
when i was setting the airport setup assistant, it said that i was using a PPPoE, so i entered my ISP, user name & password & finished with my setup. but i cannot connect to the internet & my AOL on the PC signed off & when i try signing on again, it cannot. so, i reset my airport base station. my AOL on the PC worked & so as my wireless network. i also downloaded the AOL for mac OS X since i read at the support page that AOL has difficulty working or connecting with mac OS X. then i tried using the airport admin utility to configure the base station. when i finished with it, everything is still ok.
so is it ok that i did not use my airport setup assistant as long as my network is configured (using airport admin utility) & my wireless network is working?
thanks for your time.

so is it ok that i did not use my airport setup assistant as long as my network is configured (using airport admin utility) & my wireless network is working?
Yes, absolutely! Both utilities access the AirPort base station's settings. You can think of the AirPort Setup Assistant as the "quick & easy" setup method, with the AirPort Admin Utility aimed more at doing "manual" or "fine-tuning" type of setups.

ISE v1.1.1 Network Setup Assistant errors

Similar Messages

Maybe you are looking for