ISE - Authentication Policy Fields

If the Compound Condition and Result are True, Authenticate against the Identity Source.

How to Install a Certificate from an Internal CA on ISE

Note: This assumes that your clients are already configured to trust the Internal CA as a Trusted Root Authority.  This is usually handled by a GPO.

Download the CA root certificate
Navigate to https://certserver/certsrv
Click Download a CA certificate, certificate chain, or CRL
Highlight the CA certificate and click Download CA certificate
Save the file to your hard drive.


Install the CA root certificate
Log into ISE
Click Administration > System > Certificates > Certificates Store > Import
Select the file you've downloaded earlier
Enter a Friendly Name
Highlight Trust for client authentication or Secure Syslog services
Click Submit

Create a Certificate Signing Request
Click Administration > System > Certificates > Local Certificates > Add
Click Generate Certificate Signing Request
Set Certificate Subject to FQDN
Add Subject Alternative Names
Set Key Length to 2048 and Digest to Sign with to SHA-256
Click Submit
Open Administration > System > Certificates > Certificate Signing Requests
Select the CSR and click Export
Save the file to your hard drive

Request a Certificate from the CA using the CSR
Navigate to https://certserver/certsrv
Click Request a Certificate
Click Advanced Certificate Request
Click the Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file
Copy the contents of the CSR (.pem file) and Paste into the "Base-64-encoded certificate request" window
Under Certificate Template, choose Web Server
Click Submit
Hightlight DER encoded and click Download Certificate
Save the certificate to your hard drive

Install the Certificate in ISE
Log into ISE
Click Administration > System > Certificates > Local Certificates > Add
Click Bind CA signed Certificate
Browse to the certificate file you have just saved.
Enter a Friendly name
Select EAP and HTTP under Protocol
*WARNING* Clicking Submit will Reboot ISE
Click Submit

NETSH WLAN Cheat Sheet

netsh wlan show interface
(Shows BSSID, Authentication Type, Encryption, Channel, Transmit/Receive rate, etc.)

netsh wlan show profiles
(Shows wlan profiles settings)

netsh wlan show networks mode=BSSID
(Shows all BSSIDs with Channel info and received signal strength)

Cisco AP Associated to Controller, but no clients connected

Ensure that "Admin Status" is set to Enabled.
Ensure radios are Enabled.

Ensure it is in local mode (not monitor mode).

Verify the country code is set correctly (some APs may be in UX or Universal mode).

Verify it is in the correct AP Group

How to Update Kali Sources List

Edit the /etc/apt/sources.list file

vi /etc/apt/sources.list

Type i to enter INSERT mode

Add the Kali Rolling Repository

deb http://http.kali.org/kali kali-rolling main contrib non-free

Hit ESC to exit INSERT mode

Type :wq to write changes and quit

Then update apt-get to have the new repository take effect.
apt-get update

How to Configure FreeRadius on Kali for 802.1X Authentication

Install FreeRadius on Linux
apt-get install Freeradius*

Define a Client (Wireless Controller)
vi /etc/freeradius/3.0/clients.conf

Type i to enter INSERT mode

client name {
ipaddr = <ip address>
secret = secret-password
}

Hit ESC to exit INSERT mode

Type :wq to save changes and exit

Define a User and Password

vi /etc/freeradius/3.0/users

username Cleartext-Password := "password"

Save changes and exit

Start the Radius Server in debugging mode
freeradius -X

Test the configuration
radtest username password localhost 0 testing123

*testing123 is the default password for "localhost"


To Enable PEAP:
Edit /etc/freeradius/3.0/mods-enabled/eap
vi /etc/freeradius/3.0/mods-enabled/eap
Set the default eap type to peap

Configure MSChapv2
vi /etc/freeradius/3.0/mods-enabled/mschap
Set "use_mppe" to yes
Set "require_encryption" to yes
Set "require_strong" to yes

Restart freeradius to have changes take effect
killall freeradius
freeradius -X

How to Delete Checkboxes that were Pasted into Excel

Click File > Options > Customize Ribbon
Enable Developer mode
Click the Developer tab
Click the Design Mode button
Highlight the checkbox and delete.