About Arne Bier

Arne Bier · 09-10-2024

Hello I'm sure all of us would love to disable TLS 1.0/1.1 support in ISE to imrove security, but there's always something in the network that seems to make this dream impossible. I discovered today that CTS uses EAP-FAST under the covers, and on th...

Arne Bier · 08-03-2024

Hello, I am using the ISE OpenAPI to renew guest portal certificates. /api/v1/certs/system-certificate/{hostName} Get all system certificates of a particular node The API works well. However, after importing the new cert and private key, the old cer...

Arne Bier · 07-27-2024

Hello, I have been spending hours trying to get SNMPv3 Informs working on any Cisco IOS or IOS-XE and it's just not working for me. The reason I want to use Informs and not traps, is that Informs are more reliable and will be queued and retried if th...

Arne Bier · 02-22-2024

Perhaps this will save anyone out there some frustration when using ISE 3.2 or later. The BU decided to rename a bunch of commands that were inherited from the classic Cisco IOS world, and which are deeply ingrained in our brains. It caught me out an...

Arne Bier · 02-11-2024

I was listening to the latest episode of Packet Pushers Heavy Networking talking about a customer’s experience with ditching their F5 in favour of the built in IOS-XE RADIUS load balancing feature. Is anyone else out there using this, and in particul...

Arne Bier · 09-22-2024

In order to allow sponsors to approve self-registered guest, the sponsor must be a member of a Sponsor Group, and as such, they must be allowed to access the Sponsor Portal. You can do what's called single-click approval, which will remove the need ...

Arne Bier · 09-22-2024

@keith-mk-li - just a few suggestions when providing show run output from devices. Your output is very long and hard to read because of the paging breaks. It's helpful to always issue this command when there is more than one page/screen of output in...

Arne Bier · 09-22-2024

Not sure, but if you take that integer 1702031250 (unix epoch time) and convert it date/time, you get Assuming that this timestamp is in seconds:GMT: Friday, 8 December 2023 10:27:30Relative: 9 months ago Does that ring any bells? Perhaps the insta...

Arne Bier · 09-22-2024

That should more than cover those 500 users. The "passive" login monitoring happens when users login to the AD - as long as users don't use the same credentials elsewhere (e.g. additional computers) then 500 should be your target value.

Arne Bier · 09-17-2024

I have not touched any portal customization for years, and even back in the bad old days, getting the code to work was a job for someone with a good understanding of java/jQuery. In my recollection, the challenge with customised code was that it got ...

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎09-22-2024 03:56 PM
Posts	3,490
Total Helpful Votes Received	5555

User Statistics

User Activity

How to disable TLS 1.0 in ISE when DNAC is used to provision devices?

is there an ISE OpenAPI Filters Reference Guide

SNMP INFORM Requests not working with SNMP version 3

ISE 3.2 and CLI changes that cause confusion and annoyance

IOS RADIUS load balancing

Re: Disable options to allow some Sponsor users to create Guest accoun

Re: Cisco switch authentication problem with ISE

Re: What is the purpose of Timestamp in ConnectionData.xml file

Re: ISE-PIC Implementation - License Type

Re: Cisco ISE 3.2 My devices portal- remove the device status column