I have two questions that I would appreciate some help with...Firstly, has anyone implemented enforcement of north-south micro segmentation policy? If so, please share any details you can. Our deployments have nearly all been brownfield and the custo...
Cisco Identity Services Engine Unauthenticated Remote Code Execution VulnerabilitiesIt stated that: "If Cisco ISE is running Release 3.3 Patch 6, additional fixes are available in Release 3.3 Patch 7, and the device must be upgraded". What the hel...
Hello Team I'm currently working on configuring the Cisco Duo Free plan to enable two-factor authentication for remote VPN using Cisco AnyConnect and FTD. I've successfully installed Windows Server, activated AD, and installed Cisco Duo Proxy Manag...
Hi community, I’m trying to better understand the behavior of RADIUS server dead detection and server group mapping on a Cisco switch. Below is my current configuration and observed output: RADIUS Dead Detection Configuration: radius-server deadtime ...
Free Certs Anyone? Have you ever wanted to get a public certificate for your ISE Portal, without the hassle of involving a commercial CA? If so, read on. This lengthy guide (maybe better as a Youtube video ... in future) will show you how I setup a...
Hello all,I have read about networks being described as "only Layer 3," and as such require no STP protocol, examples being VXLAN-based networks like Cisco SDA or ACI.However, even these networks have VLAN's (like L2 VNID's in SDA), and they also sti...
Hello. My network is fully EIGRP at the Data Center, but there is going to be another brand integrated at the DC, so need to use OSPF on different blocks.I would like to understand what could be the problems I could face if I use the next topology:[O...
Hi Team,Users in my network are receiving bad IP addresses, and our DHCP scope is set up on a Microsoft Windows Server.Please assist me in resolving this issue and let me know if you need any information from my side.
Hello, everyone. I am studying SD-WAN for my ENCOR exam and I have a question. I understand that TLOCs and TLOC routes in general will contain a color for the transport that the edge router is connected to. My question is, what exactly is the signifi...
Hi, We recently changed 2 of our 6 distribution switches from a WS-C3560E-12D-E to a WS-C3850-48XS. Nothing special, I just copied the config to the new switch with some minor adjustments. When connecting the old access switches everything went fine...
Hello All,I am a new NOC tech, and my enterprise APs run on Catalyst. Does anyone have any learning resources for maximizing Catalyst functions for troubleshooting wireless outages? Most of the learning material I've been able to find is focused on d...
Hi All, I was wondering if somebody can assist with where I am going wrong, because the guide to setup either pam_duo or login_duo seem to lack in proper instructions and don’t give good enough details for new comers to duo. I followed pam_duo to a t...
Hi, I am looking for a guide on how to get certificate working with Cisco C1111-4P (code 17.12.5a) I am trying to get ECDSA certificates working to authenticate over the FlexVPN instead of PSK I think my first question is, is it supported and what si...
Hi,In my network, my core is a pair of 9606R / stackwise virtual, and the distrubutions switches are mostly 2960, 3650 and 9300. Spanning-tree runs in pvrstp+ mode. The core switch is the spanning-tree root.Since we rebooted the core, about every 15 ...
