How is - ISE chooses what IP put in URL redirection response?

Hello

does anyone know how ISE chooses what IP put in URL redirection response if it has more than one interface with an IP address and all interfaces are enabled in the configuration of the portal?

I have a single ISE 1.3 PSN with all four interfaces configured, enabled, each unique VIRTUAL local network and each with a unique IP address.

In the configuration of the CWA portal, all four interfaces are enabled.

Clients wired to connect to n, n sends RADIUS request to ISE, ISE responds with a RADIUS response including the redirect URL parameter, which specifies the URL redirect web. The ISE configuration uses 'IP' in the URL.

My question is how ISE to choose which of its four interfaces to put in this URL? Is it always the same interface RADIUS packets received on? Or he always chooses the first activated interface Portal? Or is there another logic? Configurable or unconfigurable?

Thank you!

ISE uses the first interface enabled for this site, so if want to use a specific interface, then only activate this interface.  If the interface is GE0, default behavior is to redirect the ip value domain FULL of the node name.  If interface other than GE0, then the default behavior is to return to the IP address of the associated interface.

Aliases can be configured for each interface using the command "ip host" CLI to associate a domain FULL name/host name to the IP address of a given interface.  Once configured, ISE will return that value instead of the IP address of redirection.  This is critical if want to avoid trust certificate warning on the clients that connect.

Do not forget that the certificate assigned to the interface includes the correct field FULL name or possibly wilcard value in fields CN or SAN to avoid warnings from cert.

Tags: Cisco Security

Similar Questions

  • Hello, how can I choose what image the film will show before you press play and the movie starts?

    Hello, how can I choose what image the film will show before you press play and the movie starts?

    You can not.  At least not with Adobe tools.

  • How can I choose what E-mail should appear in the "from" field by default

    I just installed Thunderbird and triing to set how I like. When I push the button create, I see one of my email address in the form 'From '. But I would like another email to shown here by default. How can I do this?

    It would be an e-mail address?

    How many accounts e-mail that you put in place? They use POP or IMAP? You do something funky like combining them in an Inbox?

    In theory, Thunderbird will use the email address associated with the folder that you are in when you write your answer. If you are in a place like local folders, then it should use the address to which the original message was sent. If you create a new message (not answer) and then she must use the address associated with the current folder, or address by default if you are in the local folders.

    In practice, it is not always choose the address you want to use, and there are many Add-ons to help with this. Watch identity selector ID and correct for examples.

  • How I choose what LAN (2 different local networks) to have access to the internet?

    I have 2 Ethernet network cards on my PC.
    I would like to know how I can choose what card (LAN) internet connection.

    See also this and this.

  • 'Manage account' page for SYNC has no controls other than change password, delete the account & disconnection? !!! How does one choose to synchronize the information on Safari?

    I am very impressed with this mozilla support. For one I got this detail section filled completely and communication it was not accepted when I pressed the button question post...! Half an hour to write these to the top... GO?

    Anyway to be more concise: I see the synchronization preferences page. I chose the stuff on the left side, and my computer is already pre-registered on the bottom.

    Other than that how does one choose what to synchronize with (in my case, Safari also can a sync for firefox 'cloud' there to prepare for a clean reinstall? And where would progress & achievement shown?

    Sync does not support cross-browser. I have working installation of Firefox Firefox installation only, with the synchronization server in the middle.

    The use of the term 'cloud' could be misleading; the data are encrypted and are decrypted in Firefox to be usable. Without the correct hidden 'key' [created from the password] data can not be decrypted and Sync does not connect to attempt to recover the data of the user.

    Not recommended to use Sync as a backup media for a clean reinstall of the OS. Some users have done the job, while many others have involuntarily lost their data because of stupid mistakes, they did, and wrong to understand how works the synchronization service.

    See this support article for how to back up and restore data in Firefox, which in your profile folder.
    https://support.Mozilla.org/en-us/KB/back-and-restore-information-Firefox-profiles

  • How to choose what Firefox 5 profile will use when it opens?

    I have several profiles in FF5. At each opening of FF, it opens with a different profile. So, how to choose what Firefox 5 profile will use when it opens?

    Type, it is in the Run dialog box: firefox.exe - p. This will bring up the Profile Manager where you can select the default profile. (See the screenshots)

  • What the F... How difficult it must be to put an end to an order, only speaking in Indian English, no att communication all in standard internet communication, like all easy doors are closed, couhgt I have a trap.

    What the F... How difficult it must be to put an end to an order, only speaking in Indian English, no att communication all in standard internet communication, like all easy doors are closed, couhgt I have a trap.

    Hello

    I apologize for the inconvenience, you face.

    Please confirm if you wish to cancel your Adobe membership?

    Kind regards

    Sheena

  • How do I know what the maximum number of agents I can put on a hyperic serv

    How do I know what the maximum number of agents I can put on a hyperic server. ?? IM using the built in database on a linux unbuntu 4 cpu system ' s2592 MHZ. 7GB of Ram. I assumed that the
    disk space can be the most important question? Any suggestions or any help to determine when to stop adding customers would be useful. We can use open source, but are also
    talk about the EE version. The Hyperic server type would make a difference in space etc.?

    Disk i/o is probably a bit more critical than the disk space that the DB generally is not larger than 10-15 concerts.

    Ability wise, your system is CPU/RAM.  Disk i/o will probably be your main bottleneck and the thing that will determine the maximum number of agents that can have on the server.

    Splitting of the DB from the HQ server would certainly help in the perspective of General load.  Definitely put the DB a system with several piles of discs (part of a San, fast raid) will help you in the disk i/o.

    If I was trying to answer the same question, I guess that I look at the Scriptures on disk on the DB as starting point, test the drive with systat/iostat or something to see what the drive is capable of in terms of read/write speeds and also look at postgres for slow queries, duration of execution of query, used memory and cpu.  Naturally, I would do the majority of "look at her" go to HQ itself :)

    Post edited by: ama

  • Mini L9W - B satellite. How to choose what battery to use?

    Hello

    I would like to know if it is possible to choose what batteries to be used when the Tablet is connected to the base.
    I prefer to use the base battery (accumulator) first front of the shelf (main battery).

    Kind regards.

    I found the problem, I'll leave the solution here.

    The problem was in fact the keyboard dock battery was not handled appropriately by the PC so when the Tablet reaches 0% battery that the computer had to close even with a full 100% battery dock.
    Try to solve it through the Device Manager was not enough and did not work.
    Updated BIOS v1.3 v1.7 fixed the problem and the battery of the dock is currently used and the priority on the Tablet as it should.

    Hopefully it'll help.

  • How do I know what version (update / output level) version 6 has been applied to my system?

    Question
    How do I know what version (update / output level) version 6 has been applied to my system? I applied several different publication levels to version 6 of FF, but all about feature tells me is Version 6.0. No version! This seems to be a change in the updates in the way which are managed. What is a distortion because of the speed in which you push updates and what's new?
    contact me if you need something more

    e-mail address removed

    For those who are in need of a photo/screenshot, see attachment below. Right click on the image below, choose "Open in New Tab", click on the image to open in the new tab to zoom in and enlarge the image.

    If this answer solved your problem, please click 'Solved It' next to this response when connected to the forum.

  • How do I not what SATA driver do I need for the Satellite L300 - 03C

    How do I not what SATA driver do I need for the Satellite L300 - 03C so I can make nlite

    Hello

    Your laptop seems to be a Satellite L300 - 03C PSLB8C-03C01X.
    As already indicated on your first visit to thread the Toshiba Canada page and choose this model of laptop on the driver page.
    http://209.167.114.38/support/download/ln_bymodel.asp

    Then download the Intel Matrix Storage Manager (SATA) - image of floppy drive. It of for Vista, but the files in this package should work with Win XP too.
    Include these files using nLite to create the new disk Win XP that contains SATA drivers.

    Finally use this disk to start.

  • Should I delete the programs of 2004? How can you know what is safe to delete?

    Original title: remove programs

    I think I have a virus.  I see on my computer a few applications with and installed as of 2004.  The computer was purchased in 2007.  When I run it in safe mode, it works fine and all applications have a date of 2007 or newer.  Should I delete the programs of 2004? How can you know what is safe to delete?

    Hello

    This is not an indication of malware. Could be those are placed on the
    computer by the manufacturer of the system and that was the date that firstly, they prepared their
    for massive installation, or if they did not set a date and be used arbitrarily.

    =============================================================

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the
    cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    TDSSKiller.exe. - Download the desktop - so go ahead and right-click on it - RUN AS ADMIN
    It will display all the infections in the report after you run - if it will not run changed the name of
    TDSSKiller.exe to tdsskiller.com. If she finds something or not does not mean that you should not
    check with the other methods below.
    http://support.Kaspersky.com/viruses/solutions?QID=208280684

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    New Vista and Windows 7 version
    http://OneCare.live.com/site/en-us/Center/whatsnew.htm

    Original version
    http://OneCare.live.com/site/en-us/default.htm

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
    RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps.

  • How can I specify what qml in my application is a card?

    I want to my request to have a card that can be called by other applications via the menu share. I have the basics down what must be the configuration xml file as to put my application in the menu share interest. But in my own application, how can I specify what queue qml is the card?

    You expect the invoked() signal, then create your document root and call setScene in there, instead of in the constructor of your application.

  • How do I see what changes, UAC prompts all?

    When I run shareware or a program downloaded recently, I worry about what "changes" or UAC is prompting action.

    For example: Pixeur selector of color (http://www.veign.com/application.php?appid=107)
    I don't expect really a pipette to give me the UAC guests - but it does. However when I look at the UAC dialog for more details, he said only program location - no details about what is tyring to do.
    Given that the 'changes' or 'actions' of the program are what UAC alert me, I am concerned and want to know EXACTLY WHAT CHANGES or ACTIONS the program is trying to do, so I can confirm their.
    The UAC dialog box does not appear to be any information whatsoever?  I have to guess blindly, without knowing / being able to choose what I agree to?
    It's like a legal contract I don't get see first?
    ?????????????????????????????
    Why hell Microsoft choose to scare & alarm me, like that, without giving me any visibility or details - so I can make an informed choice.
    Sigh.
    I paid money for Windows 7, I thought that the days of Vista garbage exceeded & I finally have a decent OS.
    I paid money for Windows 7, I thought that the days of Vista garbage exceeded & I finally have a decent OS.

    We will calm down a bit and consider this:

    • UAC is designed to prevent programs that are not allowed to do risky things behind your back.
    • Attempts to create or modify files in the files system is considered to be risky.
    • It is also risky to attempt to change the registry.
    It's as simple as that. If the color of pixeur selector keeps generating warnings of the UAC, then you have three options:
    -To obtain a compatible version of Windows 7.
    -Check the FAQ to know how to bypass the problem.
    -Disable the UAC (not recommended).
  • How do you choose the color of the exterior of the Illustrator?

    Hey, no one knows what happened to the color picker in Illustrator? In Photoshop, you can sample a color from anywhere outside the window of the application by clicking and dragging with the eyedropper tool. I know you used to be able to do as in Illustrator, but now it doesn't seem to work. I tried Googling the answer, but all I get are about a hundred people showing how to do it in 2012, 2013. Nothing more recent than that which leads me to believe they have much changed something in a recent version of the AI. Don't know how to do it now. Basically, what I need to know is, How do you choose the color of the exterior of the Illustrator these days? I have the latest version - IA CC 2015.3 I think.

    Thank you very much!

    Ben

    My guess is Yes. I'm on a Mac, but test everything that does not work for you, and it works very well, including the colors of the windows of the browser and my wallpaper.

    I booted up my (Win 10) Surface and get the same results that you describe. It could be a limitation of Windows or a bug, but whether you can report it here: feature request/Bug Report Form.

Maybe you are looking for