About Leonardo Santana

Leonardo Santana · 08-15-2024

Hi, Its possible to change the vlan assignament at the SSID using MERAKI group policies? SSID: CORP We have three different rules that will assign the authorization profile to three diferent vlans Scenario: Meraki APsCisco ISE 3.1

Leonardo Santana · 08-13-2024

Hi, What´s is the best way to authenticate the APs in flexconnect? MAB or NEAT? Version: Cisco ISE 3.3

Leonardo Santana · 08-09-2024

Hi, Our customer has two Cisco ISE deployeds like this: Gig0: Management Only (HTTPS/SSH), TACACS+/RADIUS to/from NADs and Guest We need to configure a separate interface for Guest Access in the DMZ, so the configuration will be like this: Gig0: Mana...

Leonardo Santana · 08-08-2024

Hi, I need to edit this ACL DNAC_ACL_WEBAUTH_REDIRECT created automatic by the DNAC Server. How can i edit this? At my controller side or at the DNAC?

Leonardo Santana · 07-29-2024

Hi all, About the configuration between ISE EAP-TLS with Microsoft Azure ID, i have some doubts: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218197-configure-ise-3-2-eap-tls-with-azure-act.htmlProcedure: The certifica...

Leonardo Santana · 08-15-2024

Hi, Thanks for your answer, our customer just want to configure the APs with MAB. This config below will work? interface gigax/xdescription ">_MERAKI_LAN<"switchport trunk encapsulation dot1qswitchport trunk allowed vlan x,x,x,x,xswitchport mode trun...

Leonardo Santana · 08-09-2024

Rob, Like this, a ip route 0.0.0.0 0.0.0.0 pointing to he default gw of my guest network. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/cli_guide/b_ise_CLIReferenceGuide_27/b_ise_CLIReferenceGuide_27_chapter_011.html#wp3952387991 ISE Interfa...

Leonardo Santana · 08-09-2024

Hi Rob, Thanks for your answer. After configuring the ip route how ISE will select the correct interface at show ip route?

Leonardo Santana · 08-08-2024

Hi, And from DNAC release 2.3.5.3 with a 3504 controller its better to create a new acl? Enviroment 1x 3504 Controller Version: 8.10.185.0 for this customer fabric 1x DNAC 2.3.5.3 2x Cisco ISEs 3.3 Patch 2

Leonardo Santana · 08-02-2024

So we need to add the Entra ID tenant as a REST ID connection using EAP TLS? At step 9 we do not enable RPOC? https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216182-configure-ise-3-0-rest-id-with-azure-act.html

Member Since	‎06-01-2011 11:12 AM
Date Last Visited	‎09-05-2024 08:19 PM
Posts	1,553
Total Helpful Votes Received	2000

User Statistics

User Activity

Cisco ISE with Meraki Group Policies

Cisco APs MAB

Cisco ISE dedicate Guest Interface

Change DNAC_ACL_WEBAUTH_REDIRECT

Cisco ISE 3.2 with Azure AD

Re: Cisco APs MAB

Re: Cisco ISE dedicate Guest Interface

Re: Cisco ISE dedicate Guest Interface

Re: Change DNAC_ACL_WEBAUTH_REDIRECT

Re: Cisco ISE 3.2 with Azure AD