About Arne Bier

Arne Bier · 09-23-2024

Hello DNAC/Cat Center is a very chatty product and it's constantly logging into devices to run many show commands. Without single-connect, there will always be a 3-way TCP handshake for every command issued when command authorization is enabled. Belo...

Arne Bier · 09-10-2024

Hello I'm sure all of us would love to disable TLS 1.0/1.1 support in ISE to imrove security, but there's always something in the network that seems to make this dream impossible. I discovered today that CTS uses EAP-FAST under the covers, and on th...

Arne Bier · 08-03-2024

Hello, I am using the ISE OpenAPI to renew guest portal certificates. /api/v1/certs/system-certificate/{hostName} Get all system certificates of a particular node The API works well. However, after importing the new cert and private key, the old cer...

Arne Bier · 07-27-2024

Hello, I have been spending hours trying to get SNMPv3 Informs working on any Cisco IOS or IOS-XE and it's just not working for me. The reason I want to use Informs and not traps, is that Informs are more reliable and will be queued and retried if th...

Arne Bier · 02-22-2024

Perhaps this will save anyone out there some frustration when using ISE 3.2 or later. The BU decided to rename a bunch of commands that were inherited from the classic Cisco IOS world, and which are deeply ingrained in our brains. It caught me out an...

Arne Bier · 09-24-2024

We need to remind ourselves that MAB is inherently non-secure. In other words, as its acronym MAB suggests, it's bypassing secure authentication. MAC spoofing is easy, as you've already discovered. But here are some tips: Use DHCP instead of static I...

Arne Bier · 09-24-2024

Would be good to track down the author and get their direct feedback.

Arne Bier · 09-22-2024

In order to allow sponsors to approve self-registered guest, the sponsor must be a member of a Sponsor Group, and as such, they must be allowed to access the Sponsor Portal. You can do what's called single-click approval, which will remove the need ...

Arne Bier · 09-22-2024

@keith-mk-li - just a few suggestions when providing show run output from devices. Your output is very long and hard to read because of the paging breaks. It's helpful to always issue this command when there is more than one page/screen of output in...

Arne Bier · 09-22-2024

Not sure, but if you take that integer 1702031250 (unix epoch time) and convert it date/time, you get Assuming that this timestamp is in seconds:GMT: Friday, 8 December 2023 10:27:30Relative: 9 months ago Does that ring any bells? Perhaps the insta...

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎09-23-2024 02:01 PM
Posts	3,493
Total Helpful Votes Received	5557

User Statistics

User Activity

How to setup TACACS+ single-connect properly and safely

How to disable TLS 1.0 in ISE when DNAC is used to provision devices?

is there an ISE OpenAPI Filters Reference Guide

SNMP INFORM Requests not working with SNMP version 3

ISE 3.2 and CLI changes that cause confusion and annoyance

Re: Profile Transitions and the use of Exception Actions

Re: What is the purpose of Timestamp in ConnectionData.xml file

Re: Disable options to allow some Sponsor users to create Guest accoun

Re: Cisco switch authentication problem with ISE

Re: What is the purpose of Timestamp in ConnectionData.xml file