Use of second interface (eth1) on ISE

Hi. I am seting up a two-node deployment of ISE (3315 - version 1.2.0.899). Both appliances will be connected to my two core switches.
I would like to know if I just have to configure one ethernet interface (eth0) on each ISE server and then connect each eth0 to a different swithch. Or, in order to get more redundancy, should I configure both ethernet interfaces on each ISE appliance and then connect eth0 to switch 1 and eth1 to switch2 on both appliances?
Thank you

yes, you can do that , as all the ports can be used for replication and synchronization but for management is restricted to Eth0 only.

Similar Messages

  • MARS second interface can't be on same network?

    I am trying to enable the second interface (eth1) in Mars for management. The GUI won't let me set it to be on the same network as eth0. Why is this? Can I do it from the CLI? Maybe Cisco can do it in expert mode?

    See for discussion:
    http://groups.google.com/group/cs-mars-ug/t/3457ba30ac6e3ea3?hl=en-GB

  • Use of the second interface

    Hi,
    I just configured the first interface of my C150 ESA with ip address, default gateway,listener, RAT and SMTP routes. I want my IronPort to handle mail for another domain with a totally independant netwotk (subnet and mail servers...). Can I configure the second interface the same way I configured the first one (obviously with all the good settings...;-)) ? Does it work? Is there no problem of IP or SMTP routing ?
    To be short, I want to do two "one interface configuration" scheme with my ESA (which has two physical interfaces) and not a "two interfaces configuration" scheme
    Thanks,
    Vincent

    Vincent - should be ok to do this. You have two options to do this:
    1. Use the 2nd NIC port and assign IP.
    2. Use the virtual gateway feature to get this 2nd IP address onto the network and then create a new listener on the virtual interface..this is much simpler and less work.
    Use the interfaceconfig CLI command or in the GUI to do this. Bind the new interface with it's unique DMZ ip onto the same network card as used for the previous interface (data 1 i assume).
    Option 2 is much easier
    :wink:

  • ISE portal guest on second interface

    Good morning,
    I have configured my switch and ISE with this template
    https://supportforums.cisco.com/docs/DOC-18325
    But i want the portal to second interface, if i change the advance attributes with the address
    https://ip(second interface):8443/guestportal/Login.action
    the posture status become not applicable and the redirect is not done. If i copy manually the url, i access to guest portal.
    Can you help me?
    sorry for my badly english.
    Best regards
    Paolo

    Hello!
    I think this link will help you!
    http://www.cisco.com/en/US/docs/security/ise/1.0.4/install_guide/ise104_app_e-ports.htmlhttp://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_app_e-ports.html
    From this page we can see that Guest\Sponsor portal can be only in GbEth0

  • GSS-Communication on Second Interface

    Hi,
    I shall be deploying two GSS in two different locations.
    Both GSS devices shall be placed on a DMZ using Private IP addressing with NAT to Public addresses to resolve DNS requests.
    As replication is not supported using NAT, would it be feasible to configure the second Interface with an IP address on the inside Network which would be used for GUI Management and also GSS-Comunications. Are there  any security issues which this approach.
    regards
    Ian.

    Hello Ian,
    By default, the first Ethernet interface (eth0) is used for both interdevice communications and for communicating with ANM, which you use to manage your GSS devices.  You can use the gss-communications interface-config command to change it to eth1.  I'm not aware of any security issues with this approach.
    Hope this helps,
    Sean

  • SIOCSIFFLAGS: Unknown error 132, could not set interface eth1 UP. Help

    After lots of trouble getting my wireless card working and installing the ipw2200-fw drivers to get it working i have encountered an other problem.
    I set up a netcfg profile called mynetwork but now whenever i try to connect using netcfg mynetork, i get:
    SIOCSIFFLAGS: Unknown error 132
    Could not set interface 'eth1' UP
    Being a noob I have no clue how to fix this. Anyone know how to make it work?

    See this bug report for some clues:
    https://bugs.archlinux.org/task/19507
    Also, duck duck go/google is your friend: please search before posting...

  • My question about second INTERFACE DESIGN

    i create one interface( main interface created by JFRAME)
    in main interface i want to click button
    then create second interface.
    i should use which class to build second interface?
    i tried JFrame but it doesnot work
    JFrame is top cotainer .and it need main() also
    thanks in advance
    please give some hints

    i tried JFrame but it doesnot work - JFrame is top cotainer .and it need main() alsoThat's not true - you can create a JFrame instance without it having its own main() method.
    When the user clicks the button, do this:JFrame secondFrame = new JFrame("Second Frame");
    secondFrame.add(....whatever you need to add to it - JPanels etc...);
    secondFrame.setBounds(100,100,400,300);
    secondFrame.show();

  • Aironet 1240AG - cant use the web interface

    I am trying to configure a new Aironet 1240AG. After it picked an ip address from the DHCP in my lan, I still can't log in using the web interface. I am using an Internet Explorer 6.0 on Win 2000. It keeps telling me cannot find server. please i need assistance

    Hi Obinna,
    Sorry about the link :( The problem here is the fact that 12.3.(11)JX is a Lightweight image. Have a look;
    Warning: All Cisco Aironet Access Points receiving Cisco IOS Software Release 12.3(11)JX will only function in conjunction with a Cisco Wireless LAN Controller. They will no longer be able to function as Cisco Aironet Autonomous Access Points.
    This product bulletin describes the content and delivery information for Cisco IOS Software Release 12.3(11)JX. This is a Cisco Lightweight Access Point Protocol (LWAPP) upgrade and recovery support software image supporting Cisco Aironet 1100, Aironet 1130, Aironet 1200, Aironet 1230 AG, Aironet 1240 AG, and Aironet 1300 Series Access Points.
    http://www.cisco.com/en/US/products/ps5861/prod_bulletin0900aecd804b1a72.html
    You can use this method to convert the AP back to Autonomous Mode (and access via Web);
    Reverting the Access Point Back to Autonomous Mode
    http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272
    You can convert an access point from lightweight mode back to autonomous mode by loading a Cisco IOS Release that supports autonomous mode (Cisco IOS release 12.3(7)JA or earlier). If the access point is associated to a controller, you can use the controller to load the Cisco IOS release. If the access point is not associated to a controller, you can load the Cisco IOS release using TFTP.
    Using a TFTP Server to Return to a Previous Release
    Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
    Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
    Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
    Step 3 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, and c1240-k9w7-tar.default for a 1240 series access point.
    Step 4 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
    Step 5 Disconnect power from the access point.
    Step 6 Press and hold MODE while you reconnect power to the access point.
    Step 7 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
    Step 8 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
    Step 9 After the access point reboots, reconfigure it using the GUI or the CLI.
    From this doc;
    http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272
    Hope this helps!
    Rob

  • Hi,using the COM interface how do you get/set

    Hi, using the COM Interface how do you get/set the Keep iTunes Music Folder Organised options, I cant seem to find it in the help. Secondly if I have the location of a file and the Track DatabaseId, is there any way to get get the IITrack object that relates to the location. As far as I can see the Search method only allows searching on artist/abum,title,composer , and GetITObjectByID() reuires both the track database id and the track in playlist id ,and I only have the first.
    Thanks for any help Paul

    Yes, I brute force my way through it. I analyzed the file before and after a preference change to find the data changed. FYI, the "data" portion of the iTunesPrefs.xml file appears to be Base64-encoded. Strings are UTF8.
    If you want more support from apple, you would probably need to buy an higher-level ADC account.
    You can also try submitting an enhancement request through http://bugreport.apple.com (requires at least a free ADC Online account)

  • Using a second Public IP Address:

    Guys, 
    My client has been allocated 2 Public IP Addresses from the ISP, but we always just used one of them because there was never a need to use the second. Well, we now have a situation, where we need to port forward port 5060 to two different local IP addresses. The obvious solution would be to use the second public IP Address and port forward it to 5060 and then call it a day. I just don't understand how that works on a cisco router. Does the router know about all of the Public IP's because when I added the main public IP Address on the WAN port, I put the subnet mask in that accounts for the 2 IP's? How do I make the Router aware of my second Public IP Address? 
    Thanks in advance for all of your help,  

    You won't be able to port forward the same port on the same public IP to different local IPs  because the router will have no way of knowing which local IP it is meant for.
    But what you could do is use your existing IP for one of the translations and the second IP for the other eg.
    ip nat inside source static tcp 192.168.5.10 5060 interface gi0/1 5060
    where gi0/1 is the outside interface and then
    ip nat inside source static tcp 192.168.5.11 5060 <unused public IP> 5060
    In terms of how it works with the second public IP the ISP has a router with an IP from the same public IP range. So when traffic gets to ISP router inbound from the internet the ISP router requests the mac address of the public IP.
    Your router performs proxy arp for that public IP so it responds with the mac address of it's outside interface.
    This means that traffic for that IP is sent to your router.
    Jon

  • AP Payment Upload Using API or Interface

    Hi ,
    I had requirement to upload the AP payment information using API or Interface. I have the below code. But is showing some "Unexpected" error.
    declare
    p_num_printed_docs NUMBER;
    p_payment_id NUMBER;
    p_paper_doc_num NUMBER;
    p_pmt_ref_num NUMBER;
    p_return_status VARCHAR2(200);
    p_error_ids_tab IBY_DISBURSE_SINGLE_PMT_PKG.trxnErrorIdsTab;
    p_msg_count NUMBER;
    p_msg_data VARCHAR2(200);
    begin
    MO_GLOBAL.SET_POLICY_CONTEXT('S',84); --- Apps intialize
    fnd_global.apps_initialize(1823,20639,200); --- Apps intialize
    IBY_DISBURSE_SINGLE_PMT_PKG.SUBMIT_SINGLE_PAYMENT(
    p_api_version => 1.0,
    p_init_msg_list => fnd_api.g_false,
    p_calling_app_id => 200,
    p_calling_app_payreq_cd => '13011',
    p_is_manual_payment_flag => 'Y',
    p_payment_function => 'PAYABLES_DISB',
    p_internal_bank_account_id => 10000, -----12001,
    p_pay_process_profile_id => 161,
    p_payment_method_cd => 'CLEARING',
    p_legal_entity_id => 23324,
    p_organization_id => 84,
    p_organization_type => '',
    p_payment_date => sysdate,
    p_payment_amount => 111,
    p_payment_currency => 'USD',
    p_payee_party_id => 91678,
    p_payee_party_site_id => 45272,
    p_supplier_site_id => '',
    p_payee_bank_account_id => '',
    p_override_pmt_complete_pt => 'N',
    p_bill_payable_flag => 'N',
    p_anticipated_value_date => '',
    P_MATURITY_DATE => '',
    p_payment_document_id => 1,
    p_paper_document_number => '',
    p_printer_name => '',
    p_print_immediate_flag => '',
    p_transmit_immediate_flag => '',
    x_num_printed_docs => p_num_printed_docs,
    x_payment_id => p_payment_id,
    x_paper_doc_num => p_paper_doc_num,
    x_pmt_ref_num => p_pmt_ref_num,
    x_return_status => p_return_status,
    x_error_ids_tab => p_error_ids_tab,
    x_msg_count => p_msg_count,
    x_msg_data => p_msg_data
    commit;
    DBMS_OUTPUT.put_line ( p_return_status || '---''---' || p_msg_data || '--''--' || p_msg_count );
    IF p_msg_count = 1 THEN
    DBMS_OUTPUT.put_line ( p_return_status || '---''---' || p_msg_data || '--''--' || p_msg_count );
    ELSIF p_msg_count > 1 THEN
    FOR i IN 1..p_msg_count LOOP
    DBMS_OUTPUT.put_line ( i||'. ' || fnd_msg_pub.get (p_encoded => fnd_api.g_false) );
    END LOOP;
    ELSE
    DBMS_OUTPUT.put_line (p_return_status);
    END IF;
    end;
    If anyone knows the solution please respond quickly. This is quite urgent requirement. If I am not using right API then please suggest as well. This requirement for Oracle Apps R12
    Regards,
    Prakash

    Hi,
    Can you please advise if you had a response for your message.
    Regards,
    Sunil

  • Loading bank accounts with invoices using Payables Open Interface Import

    Dear Gurus,
    We are on 11.5.10.2.
    We create invoices in the 3rd party system, then load them into oracle using payables open interface import process.
    When users create invoices, they choose Vendor and Site first. If the Vendor Site has multiple bank accounts assigned, users may select the one that is non-primary.
    When we load the invoices into Oracle, it finds the PRIMARY account for the particular vendor site, and assigns it to the invoice.
    Is it possible to load bank accounts assigned to invoices into Oracle AP?
    Many Thanks,
    Iana

    Hi,
    No issues for me on Payables Open Invoice Interface with 12.0.6 - and yes make sure you match up the invoice_id on invoice, lines interface tables.
    Regards,
    Gareth

  • How to update an existing supplier using Supplier Open Interface Import?

    Hi
    I need to updated an existing supplier.
    Is it possible to update using supplier open interface import and how?
    Thanks in advance.
    Thanks,
    Mallesh

    Hi Atul,
    I am using CCM 2.0 and SRM 5.0 (EBP5.5).
    We are not using XI, so i guess we cant use the program "/ccm/file_upload".
    we have migrated the product master data from R/3.
    We have developed a report which takes product category as input and gives out flat file in csv format containg all the items in that prod category.
    Then we upload the file in CCM by logging thro the brpwser.
    Similarly, i can develop another program which will give me a CSV file foll all those items changed in R/3 in a day.
    Then we can upload that file in CCM.
    But i have doubt if it will update the existing items in catalog.
    Hope I could make myself clear.
    Thanks
    Abhishek

  • Use of Externalizable Interface

    Hi All,
    can any of you please tell me that what is the exact use of Externalizable Interface and when do we need to use Externalizable instaed of Serializable.
    Thanks in advance.

    Use the Externalizable interface when you need complete control over your Bean's serialization.
    For example, you want to make a serialization process into a different file format ( file content structure)
    Regards,
    Alan Mehio
    London,UK

  • Use of abstract interface

    I have a series of questions....... Go through.
    What is the use of abstract interface in java ?
    What is the use of static object in java ?
    What is the use of abstract key word to variables ?
    Object reference passed to method are final. Can ' t we change it ?

    class Testing {
         int i;
    public class RefFinal {
       public static void f ( Testing t1, Testing t2) {
           Testing temp;
           temp=t1;
           t1=t2;
           t2=temp;
           System.out.println("value of i in t1 =" +t1.i);
           System.out.println("value of i in t2 =" +t2.i);
       public static void main( String args[]) {
          Testing t1 = new Testing();    
          Testing t2 = new Testing();    
          t1.i=10;
          t2.i=20;
          f(t1,t2); 
          System.out.println("value of i in t1 =" +t1.i);
          System.out.println("value of i in t2 =" +t2.i);
    }      Here the code explain why?

Maybe you are looking for