About jefferyshi

jefferyshi · 03-08-2023

Hello All,Recently found there are lots of VPN anyconnect user authenticated last year but halted in ISE live session, and occupied more base license. Actually, the users had dropped on the ASA devices, but still see active live session on ISE.I trie...

jefferyshi · 04-30-2022

Hello All,We have ISE (Version 2.6.0.156) authenticate anyconnect remote VPN and TACACS for network devices(Total 36 devices including Cisco ASA, routers, and switches).Actually, we don't have much remote anyconnect vpn client, less than 100. but the...

jefferyshi · 05-22-2015

Hello All, I have HA PIX515E and Version is 7.2(2). but the HA is not working recently.the primary firewall Unable to sync configuration from Active. the interface status is wired.outside and inside interface are down, protocol up. but the switch whi...

jefferyshi · 04-02-2014

Dear all, I want to know if ASR9k support "BGP Support for IP Prefix Export from a VRF Table into the Global Table"and "BGP Support for IP Prefix Import from a VRF Table into the Global Table" feature? the IOS command is export ipv4 unicast and i...

jefferyshi · 01-08-2012

Hello all,The L2VPN between PE1 and PE2, both PE need use loopback1(just for L2 VPN) as peering.PE1----MPLS backbone----PE2The L2 VPN is working without problem. I expect use loopback1 to establish LDP neighbor, but LDP neigbor established between PE...

jefferyshi · 03-10-2023

Hello Rodrigo,After Reset M&T Session Database on pMNT, the stuck live session cleaned up.Thank You Jeffery

jefferyshi · 03-10-2023

Hello Rodrigo,We have 2 nodes primary and backup. Do we need reload both at same time? Both enabled monitoring.I also see some stuck live session in "Started" status.probably due to network connection issue loss the accounting packets, it could happe...

jefferyshi · 03-09-2023

Thanks, AhollifieldI see the current latest patch is 2.6.0.156-Patch12. We can schedule to install this patch. Will consider upgrade 3.x in the future, but not now.I want to clean up the lost of dead live session which doesn't exist on ASA5500 anymor...

jefferyshi · 03-08-2023

Hello Rodrigo,Check on vpn configuration on ASA5500, missed the accounting group. I have just added it. Could avoid session halt next time. Thank you so much.But still can not terminate these old live session on ISE. Mar 08 2023 23:06:33: %ASA-4-1091...

jefferyshi · 05-01-2022

Yes, accounting-config in place for any connection users. tunnel-group SSLVPN type remote-accesstunnel-group SSLVPN general-attributesaddress-pool SSLVPN_POOL_1authentication-server-group ISERadius LOCALaccounting-server-group ISERadiusdefault-group-...

Member Since	‎12-06-2007 02:15 AM
Date Last Visited	‎03-18-2023 10:10 AM
Posts	44
Total Helpful Votes Received	9

User Statistics

User Activity

How to force terminated dead radius live sessions on ISE 2.6

ISE base licnese do not released issue

Firewall Unable to sync configuration from Active, the interface down/up

ASR9K leak BGP route between vrf and global

L2VPN LDP session source IP issue

Re: How to force terminated dead radius live sessions on ISE 2.6

Re: How to force terminated dead radius live sessions on ISE 2.6

Re: How to force terminated dead radius live sessions on ISE 2.6

Re: How to force terminated dead radius live sessions on ISE 2.6

Re: ISE base licnese do not released issue