Activity in Technology and Support
URL Filtering on FMCv on CML LABS
I have setup up a number of FTDS that are managed by FMC in CML labs. I have setup the in-built desktop in CML that is hanging off a FTD. I am able to get the internet via FTD-->Router (NAT)-->External Connector and I am able to get internet access f...
Bitlocker Network Unlock in SDA Environment
Hello all,My organization was testing Bitlocker Network Unlock in our SDA environment and was running into issues. I was curious if anyone else has setup network unlock in their SDA environment. I'm pretty sure the reason we are having issues is beca...
DDOS protection services - how do they work
Hi AllI am currently looking into ddos protection services to protect some main internet links.What options are out there? I assume it would need to be further up the chain i.e in the ISP / Cloud ? Also, I see lots of them use BGP flowspec, what trig...
PnP discovery with Catalyst Center Sandbox & c9kv
trying to do Subject. unfortunately it doesnt get straightforward. too long story to describe fighting with factory default c9k's Mgmt-vrf enabled PnP & VLAN 1 based discovery. hence, i end up with attempt to PnP-discover via routed g1/0/8. Status: P...
Configuration retention after template or configuration group detach
I am trying to understand the device behavior when detaching an edge device from a template or removing it from a configuration group.In these scenarios, does the device retain the last applied (saved) configuration?Additionally, what is the correct ...
NX OS OSPF Filtering static routes filtering in one interface/neighbor
Hello. I have a scenario here as per diagram. All the Route/Switch (R/S) is NXOS Router/Switch (R/S)Site A has multiple static routes to (R/S)Site B. Site B also has multiple static routes to site A and at the same time has ospf running and redistrib...
IS-IS Area Authentication not working as expected
Hello, everyone. I'm labbing IS-IS Area authentication, here is my topology: P1 router isis net 49.0001.1111.1111.1111.00 is-type level-1 area-password CISCO PE2-XE - this one is purposely configured without a password router isis net 49.0001.22...
IOX Install Failed on C9136I-ROW (Advanced BLE) - WLC 17.18.2
Hi everyone, I am facing a persistent issue enabling IOX and Advanced BLE on C9136I-ROW access points. We require this feature for Asset Tags and tracking. Current Environment: WLC Version: 17.18.2 (Upgraded from 17.15.4b per TAC recommendation to f...
IE-9320-24T4X-E Port Configuration change
I have multiple setups with these network switches. At least on two different setups, we have connection issues with one of the ports (port #24). We verified that the port configuration has changed and the reminder of the ports configurations remain ...
Your experience with xFSU upgrades
Hello everyone.What's your experience with xFSU upgrades? I know this feature is there for a while, but I don't know anyone that actually used in production.We are planning to upgrade a stack of C9300-48UXM, from 17.12.03 to 17.12.06.We can do it in ...
integration problems with ISE
Hello, Could you please provide us with support? We are currently facing authentication issues with Cisco ISE after enabling biometric and facial recognition login for our users. Since the biometric feature was enabled, we have noticed that Cisco ISE...
Cisco FMC-4600 HA Sync Failed
We have two Cisco FMC-4600v7.2.9 (build 44) running in HA is two separate geographical sites. Both were in HA and running perfectly. HA failover also working perfectly. But now it's showing HA Sync Failed. Please find the screenshots shown below.Plea...
Service Unavailable error when logging into Cisco ISA-3000 FTD web UI
Hi everyone,I’m getting a “Service Unavailable” error when trying to log in to the web UI of my Cisco ISA-3000-4C-X running FTD 7.0.1 (build 84).Message shown:“Service Unavailable. The server is temporarily unable to service your request due to maint...
ISE 802.1x Authentication Failure - 12535 The EAP-TLS session ticket
Hello,I have been experiencing a number of Windows endpoints failing 802.1x authentication with the failure reason of "12535 The EAP-TLS session ticket received from supplicant is expired". When this occurs the endpoint's Wired Event log shows this ...
Resolved! ASAv in AWS Cloud,vpnUser traffic blocked from VPN to on-prem site
I set up an ASAv in AWS i configured an IKEv2 IPSEC VPN between is and my on-prem juniper SRX.i also set up anyconnect VPN gateway, using the same outside interface as the VPN gateway. VPN user authentication is supposed to go thru the IPSEC tunnel t...
| User | Helpful Count |
|---|---|
| 124 | |
| 76 | |
| 55 | |
| 45 | |
| 36 |
