some computers are not authenticated successfully with ISE and join comments vlan

Hello

We have deployed ISE in a company and set the workstations for authentication of the computer. When jobs are authentication, they are placed in the VLAN Data (5), if they fail, then they must be placed in the VLAN (50). WiredAutoConfig service as supplicant is set with gpo to all the workstations have the same settings.

Certificate of the ISE is signed by our internal CA and workstations have also imported CA in their trusted CA list.

The problem is that few jobs are placed in the VLAN. Previously on these workstations, we got a pop-up as below. When you click on 'connect' work stations have been placed properly in the data VLAN (5). We do not get this security alert more on these machines and they just join them VLAN that is don't want we want.

However, most of the workstations is authenticated successfully.

switchports configuration:

switchport access vlan 5
switchport mode access
switchport voice vlan 6
authentication event fail following action method
action of death event authentication server allow vlan 5
action of death event authentication server allow voice
no response from the authentication event action allow vlan 50
living action of the server reset the authentication event
multi-domain of host-mode authentication
authentication order dot1x mab
authentication priority dot1x mab
Auto control of the port of authentication
periodic authentication
authentication violation replace
MAB
MLS qos trust dscp
dot1x EAP authenticator
dot1x tx-time 10
spanning tree portfast
spanning tree enable bpduguard

Journal of ISE authentication;

Everyone is in a similar situation?

I guess that the machines in the domain have the root CA certificate checked under the 'Protected EAP Properties' window?

Tags: Cisco Security

Similar Questions

  • Some websites are not fully functional with the latest Firefox running on my desktop. For example: a Web site now I cannot link some pages - error

    Recently updated to 42.0 on my computer.

    A site where I used to go check my electricity bill does not accept my log in entries. Blocking my account after trying several times the user name and password. Opens well with Safari.
    Another site, I cannot access the Estatements. Error message. Features on this site otherwise good. Works with Safari.
    I would rather not use Safari.

    This problem may be caused by corrupted cookies or cookies that are blocked.

    Clear the cache and delete cookies only from Web sites that cause problems.

    "Clear the Cache":

    • Firefox > Preferences > advanced > network > content caching Web: 'clear now '.

    'Delete Cookies' sites causing problems:

    • Firefox > Preferences > privacy > "Use the custom settings for history" > Cookies: "show the Cookies".

    If the deletion of cookies did not help, then it is possible that the cookies.sqlite file that stores the cookies has been corrupted.

    • Rename (or delete) cookies.sqlite (cookies.sqlite.old) and if present remove cookies.sqlite - shm and cookies.sqlite - wal in the Firefox profile folder in the cookies.sqlite case has been corrupted.

    You can use this button to go to the current Firefox profile folder:

  • Satellite C660D - keybaord question - some letters are not taken

    Despite a bios update from toshiba by following these tips, you can not normally use my keyboard
    Some letters are not taken into account as function keys.

    What should do?
    Thank you

    + The message was edited: translation has been added.

    Have you seen this Toshiba document?
    [Keyboard issues with Satellite/Satellite Pro L670 & C660 series notebooks | http://aps2.toshiba-tro.de/kb0/TSB1103370000R02.htm]

  • Wat (windows activation technologies)... I have windows 7 rtm... when I install this update, my windows are not authentic... why?

    Wat (windows activation technologies)... I have windows 7 rtm... when I install this update, my windows are not authentic... why?

    Here is a possible explanation:

    Windows 7 displays "Windows is not genuine" with the code 0x80070005 error
    http://support.Microsoft.com/kb/2008385 ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • keyboard Microsoft creator - get a message that says: some features are not available when running on versions of windows prior to windows vista

    I installed the microsoft keyboard layout creator, but when I start the program I get a message that says: some features are not available when running on versions of windows prior to windows vista, I checked if my computer is compatible with the system requirements before downloading the program, can someone please help, thanks

    What functions are supposedly missing that you need?

    This?
    http://msdn.Microsoft.com/en-us/goglobal/bb964665

    Maybe you should have got version 1.3 instead?  (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21476)

  • M/S using wireless keyboard 800 and some characters are not displayed correctly

    Have just connected a new wireless keyboard M/S 800, and some characters are not displayed correctly. For example, I get "when @ (update 2) is pressed on the keyboard and the £ runs it shift 3.» Am currently using XP SP3.

    No problems with my original keyboard, Wired.

    Hi simoncd.

    What is your location.  The reason why I ask this is that your keyboard is set to the standard UK layout.  Looks like you have the keyboard for the U.S. keyboard layout.  Shift + 2 is the "on the UK keyboard, @ on the U.S. keyboard."

    To change the keyboard settings you must go to "Control Panel", then "regional and language options".  The first page allows you to set the number format and character relative to your location and also set the location.  Check these and modify accordingly so badly.  You want to then go to the second 'languages' tab and click on the button "Details".  Here you can set the default keyboard.  This changes if necessary.  This should, hopefully restore your keyboard to the presentation that you want.

  • Backup did not complete successfully with an error code 0 x 80070001

    The original thread title: backup error

    My first full backup did not complete successfully with an error code 0 x 80070001, what can be done to fix it?

    See link below and check your libraries. Are there any that you don't need? Do not create? This happened to me also and I got a library quick text that I didn't need, or created, and it's the same question. Note: The error number right could not be the same, so do not let alone to sway you.
     
    Backup Windows error (0 x 80070002) when adding custom libraries
    http://cogitation-rumination.blogspot.com/2009/12/Windows-backup-error-0x80070002-when.html
     
     
  • Some records are not in my list of bookmarks; the individual bookmarks can be found in the search, but the record does not show.

    Some records are not in my list of bookmarks; individual bookmarks can be found in the search, but the folder does not appear in the list of bookmarks, and results do not indicate where the individual bookmarks.

    You can use an add-on to display add a column to the Library dialog box for the folder of the bookmark.

    https://addons.Mozilla.org/firefox/addon/show-parent-folder/

    The extension can indicate only the name of the folder or you can view the full path via the menu in the folder. This full path option is useful if a file accidentally gets you drag somewhere in order to explore the it and find it.

    To access the settings of the extension, you can use the page modules. Either:

    • CTRL + SHIFT + a
    • "3-bar" menu button (or tools) > Add-ons

    In the left column, click Extensions. Then, find the Options button under the specific extension.

    A little luck?

  • Update of Firefox 4. Realize some websites does not yet work with FF4. How/where can I download the older version of FF?

    Update of Firefox 4. Realize some websites does not yet work with FF4. How/where can I download the older version of FF?

    ^ Why post if you don't have the answer to the question?

    You can get Firefox here 3.6.16.

    http://www.Mozilla.com/en-us/Firefox/all-older.html

  • IPad disabled with thousands of pictures of children that are not backed up with iTunes or icloud. Recommendations for the recovery of photos please?

    IPad disabled with thousands of pictures of children that are not backed up with iTunes or icloud. Recommendations for the recovery of photos please?

    Sorry, but if your device is disabled and you have no backup, then you won't be able to save the data on the device:

    https://support.Apple.com/en-us/HT204306

    You should back up your device regularly to iCloud or import your photos to an application on your computer. Otherwise, you will be risking losing those photos. If your device has been lost, stolen, or crushed by your car, you'd be in the same situation. Really sorry for your photos.

    Good luck

    GB

  • have 5 LR and CC. The folders are different, some are missing in the CC. And some complete are not available in CC. I'm looking forward to use CC rather than LR5 so how can I make the folders and collections even on each?

    have 5 LR and CC. The folders are different, some are missing in the CC. And some Collections are not available in CC. I'm looking forward to use CC rather than LR5 so how can I make the folders and collections even on each?

    Hi cjohnm,

    You can use the 5 Lightroom Catalog and improve it in Lightroom 6, therefor all folders and collections will be identical in both version.

    Open the Lightroom all holding the key Alt/Opt and select only the 5 Lightroom Catalog and it will switch to it.

    Let us know if that helps.

    Kind regards

    Mohit

  • Some photos are not selected when I try to import ("do not import possible double images" is turned OFF!)

    Some photos are not selected when I try to import. I used Lightroom 5 since it launched and do not have this problem until a month ago (select: "do not import possible double images" is turned OFF!). I really have to control my import in the opposite case, it miss a few images, but don't know what to do when the picture is not selected. How can I import the correctly without making stuff and that's why spoil my archive carefully planned? My archive is too packed and I have double numbers ore something? What I need Lightroom 6?

    Thank you very much for your help!

    Best regards, Enith

    "Photos are indeed grey, but the imported photos are new assignments, so this:" ","then it means that you have previously imported photos in Lightroom, and so it is not necessary to import them again ', is not the case.

    While you are probably right, if the photos were just captured, the problem is that Lightroom think that these are the same pictures that were previously imported, and so until you can determine why Lightroom think that you won't progress.

    You need search for any of these photos in your Lightroom Catalog. Follow these 4 steps in order

    1. In the catalog Panel on the left side of the library Module, click all photographs
    2. Develop all batteries (picture-> stacking-> develop all batteries)
    3. Disable all filters (once or twice Ctrl-L)
    4. Search for one of these photos by file name
  • CF 11 Enterprise multiple instances are not created correctly with a separate service account.

    The company that multiple instances are not created correctly with a separate service account.

    The questions that I have are very similar to the issues identified in the link below.

    https://forums.Adobe.com/message/6584848#6584848

    My company of 11 CF will not create additional services for my sites of cold fusion beyond the initial service created during the installation process. My problems are compounded because when I try and uninstall the CF11 Uninstalling application crashes and generates the error below. I now have to try to manually uninstall to reinstall CF11. Any help or suggestion to get the problem solved is welcome.

    Description:

    A problem caused this program blocking interact with Windows.

    Signature of the problem:

    Problem event name: AppHangB1

    Application name: javaw.exe

    Application version: 7.0.510.13

    Application timestamp: 52b25e38

    Hang Signature: 0967

    Hanging Type: 6144

    OS version: 6.1.7601.2.1.0.274.10

    Locale ID: 1033

    Signing of additional blocking 1: 09675b5d8f587c9fd57b85cb72e629da

    Signing of additional blocking 2: 2cff

    Signing of additional blocking 3: 2cff32d5db809ac6ce8170a1d7ac1eb0

    Signature of blocking additional 4:0967

    Signing of additional blocking 5: 09675b5d8f587c9fd57b85cb72e629da

    Signing of additional blocking 6: 2cff

    Signing of additional blocking 7: 2cff32d5db809ac6ce8170a1d7ac1eb0

    I solved the problem with the implementation of Cold Fusion 11. I had to disable Windows server 2008 R2 UAC for all users in order to complete the installation with IIS as a web server. This also solves the problem with the inability to uninstall Cold Fusion.

  • Guest access with ISE and WLC LWA

    Hi guys,.

    Our company try to implement access as guest with dan ISE WLC with the local Web authentication method. But there is problem that comes with the certificate. This is the scenario:

    1. the clients are trying to connect wifi with guest SSID

    2. once it connects, you can open the browser and try to open a Web page (example: cisco.com)

    3, because guests didn't connect, so this link redirect to "ISE Guest Login Page" (become): url

    https://ISE-hostname:8443/guestportal/login.action?switch_url= https://1.1.1.1/login.html&wlan=Guest&redirect=www.cisco.com/

    )

    4. If there is no Login to ISE not installed comments Page, no reliable connection of message message, but it will be fine is they "Add Exception and install the certificate".

    5. once the Guest Login Page will appear and you can enter their username and password.

    6 connection success and they will be redirected to www.cisco.com and there pop-up 1.1.1.1 (IP of the Virtual Interface WLC) with the logout button.

    The problem occur in scenario 6, after the success of the opening session, the Web page with the address and the error of certificate ISE IP to 1.1.1.1 is appear.

    I know that it happened when you can has no Page of Login of WLC certificate...

    My Question is, is there a way of tunneling WLC certificate to EHT? Or what we can do for ISE validate certificate WLC, invited didn't need to install the certificate WLC / root certificate before you connect to the Wifi?

    THX 4 your answer and sorry for my bad English...

    Do not mix WLC with ISE comments Portal local Web authentication. Choose one or the other. I suggest the portal + WLC CWA.

  • My I phone 4 s as keyboard, some letters do not work correctly, p, q, and 123

    My I phone 4 s as keyboard, some letters do not work correctly, p, q, and 123

    Why do you ask in forum Sierra macOS?

    For your iPhone, try

    Force reboot

    http://support.Apple.com/en-us/HT201559

Maybe you are looking for