3 votes

Core Dropped VLANs and Pickedu up Access VLANS?

This command: no switchport trunk allowed vlan 64,68 probably didn't do what you think it does. The switch probably read that as no switchport trunk allowed vlan which would remove all vlans on ...
Special Circumstances's user avatar
2 votes
Accepted

Cisco ISE and WLC 802.1x Non-Dynamic VLAN Placement

Looking through the configuration I now see the problem. It was also hinted at in the screenshots you provided, but I missed it until I saw it in your configuration. WLAN 1, your normal production ...
YLearn's user avatar
  • 27.3k
2 votes
Accepted

Has anyone successfully deployed WLC 8.3+ anchored wlan with PSK and CWA?

While introduced in 8.3, the feature combination does not work until 8.5 code train.
raidORlostark's user avatar
2 votes

Server has a weak ephemeral diffie-hellman public key on Cisco ISE

Your issue with Chrome has been answered before:- https://superuser.com/questions/966855/force-chrome-to-ignore-a-weak-ephemeral-diffie-hellman-public-key We had a similar situation where the ...
user4565's user avatar
  • 1,026
2 votes

ISE 2.4-p2 certificates renewal

To all, The process went smoothly towards upgrading the ISE nodes with only one hurdle. All done from the Primary PAN, one node at a time and the Primary PAN last. Create the cert requests make them ...
user4565's user avatar
  • 1,026
2 votes

Unable to join ISE to Active Directory

If your ISE server's clock is not synchronized with the Active Directory DC, then authentication can fail. This is because AD is using Kerberos auth with timestamped tickets. You've stated your ISE ...
HostBits's user avatar
  • 636
2 votes
Accepted

Show port on Cisco switch that mac address is being dropped on

Using this tclsh script you can find it more easily: foreach prt { gi1/1/1 gi1/1/2 ... } show mac address table int $prt }
manish ma's user avatar
  • 1,614
2 votes

Show port on Cisco switch that mac address is being dropped on

show mac address-table address <address> would work, or if you don't know the exact mac address, just show mac address-table | inc <part>.
Teun Vink's user avatar
  • 17.4k
2 votes
Accepted

Possible to access ISE as storage?

While ISE includes FTP and SFTP clients, there's no FTP or SFTP server nor any support for SCP at all.
Zac67's user avatar
  • 84.4k
2 votes
Accepted

Cisco radius auto vlan assignment without ISE

Yes, you can do it with NPS, since ISE is just fancy RADIUS server. But the details of NPS configuration should be asked on Server Fault
Ron Trunk's user avatar
  • 67.5k
1 vote

Cisco radius auto vlan assignment without ISE

Here are a couple of good examples of NPS configuration for Windows server to accomplish 802.1x dynamic access VLAN configuration for a port connecting to a device. https://community.cisco.com/t5/...
FrameHowitzer's user avatar
1 vote

Cisco radius auto vlan assignment without ISE

You need some type of server to dynamically assign VLANs to users. You can use a RADIUIS or TACACS+ server, including ISE. Authentication happen on a server you have configured to use in the switch ...
Ron Maupin's user avatar
  • 99.6k
1 vote

Cisco ISE migration to Azure cloud

At this point in time, ISE is not supported running natively on any cloud platform. For the currently latest release (ISE 2.7), Cisco lists the following supported virtual environments: Cisco ISE ...
RobinG's user avatar
  • 1,969
1 vote

Do I need 5 licenses for Cisco DNA Premier to connect 5x 9300 switches to DNA Center, ISE and Stealthwatch?

Yes. Each device requires a DNA licenses (especially if you want to integrate them) and in fact should be sold with the new 9k series by default. Also note that the different licenses will auto come ...
onxx's user avatar
  • 176
1 vote
Accepted

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth Whenever you have an EAP based ...
YLearn's user avatar
  • 27.3k
1 vote

NTP synchronization issue with Cisco ISE

NTP is choosing to use the local time source because it has deemed it "better" (or more trustworthy) than the other sources you have configured. The stratum is only one piece of information NTP will ...
YLearn's user avatar
  • 27.3k
1 vote

RADIUS VLAN Assignment with Cisco ISE

I don't know if you've already done this, but you have to go a step further than just creating the Auth profile. You have to apply that auth profile with an auth policy. To create the auth policy do ...
BlackMagix's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible