I am having a bit of trouble grasping something regarding Certificate authentication with ISE.In our current deployment we have imported our Cert chain signed by our Root CA into Trusted certificates store.We have setup our wireless authentication pr...
I have a scenario where we use ISE for EAP-TLS cert based authentication for wireless network. It has been working at our HQ for several months. Now we are trying to roll this out to our remote offices that connect to HQ over private WAN links.The is...
There is a listing for 5525-x ASA under product comatability for 10Gig module....I cannot find any documentation that shows the 5525-x support 10gig anything other then this listing. The spec sheet on the 5525-x don't come close to 10gig throughput e...
We use MAB for our port security with our switches pointed to ISE for the MAC database check. What is happening is that when we have:"authentication host-mode multi-auth" on the switchport and we unplug the uplink to simulate an ISE outage or WAN lin...
Today we use unique Group URL for our Anyconnect profiles so that we have 1 .xml per anyconnect profile and 1 group policy per connection. For example today:https://example.com/vpn1https://example.com/vpn2 Gets an xml for VPN1 or VPN 2 (depending whi...
That was the problem, one of those famous "undocumented features". The reason it doesn't affect the entire network is because we are using WLC in our main HQ LAN. We are only using autonomous WAP in our branch locations. The command was already on th...
I am pretty sure its this:https://bst.cisco.com/bugsearch/bug/CSCuf16911I am waiting to do some testing to confirm. I noticed the successful WAP has that command on it, the one failing does not.
OK thanks, still digging.I found in the packet capture the failed attempt is showing VSA (vendor specific attribute) is sending t=WISPr-location-name val=(site name) while the successful one is sending t=Cisco-AVPair val=service-type-framed.trying to...
Yes, 2 of us went over it in detail, the WAP are configured the same. I am focused on the WAN links causing the issue, I don't know enough about the difference from MOE to MPLS but EAP-TLS but I feel that seems to be the culprit....
