About Massimo Baschieri

Massimo Baschieri · 05-03-2022

Hi all,taking advantage of cisco prime I issued by mistake on several switches the folowing command: radius-server attribute 32 include-in-access-req Strangely enough now I'm unable to remove the command on all ios switch models, I tried the obvious ...

Massimo Baschieri · 09-05-2017

Anyone knows if Firesight security intelligence feeds from talos are the same maliciuos dns/url/ip lists used by umbrella?In other words, can we say that a user under umbrella and a user under a firesight sensors with security intelligence applied ha...

Massimo Baschieri · 04-04-2016

This morning I had a customer network down due to a network loop, it turned out that the loop was caused by a single switch port were an AP1242 was connected to. I discovered that the AP went down during the night due to the failure of the power supp...

Massimo Baschieri · 03-12-2015

Hi all,for compatiility reasons I was used to enable both protocols on all the access points I prepared for customers of mine, both as regards on lightweight ones that standalone,Now, as you all know, not only it's not best practice, but on the lates...

Massimo Baschieri · 07-03-2014

Scenario:1 virtual wireless controller50 access points, some of them some local to the controller (same site), other on remote sites, all in flexconnect mode.Is there a way for a wlan to be locally switched for a group of ap's, essentialy those local...

Massimo Baschieri · 04-19-2024

LDAP integration is crucial in order to get user list and user/group association from AD, but it doesn't tell you anything about ip/user association, that's why ISE/ISE-PIC is needed for user awareness.Other vendors have internal client for that, suc...

Massimo Baschieri · 02-12-2024

If you don't use posture and if you don't make creative use of portals the impact is very low, ise restarts application server service only on each node, one at a time.I've just updated admin certificate on a 15 nodes deployment during business hours...

Massimo Baschieri · 11-03-2023

Exclude those IPs on the variable set applied to the relevent rules, it works like a charm.

Massimo Baschieri · 09-30-2023

Not sure about this, if you have and sd-wan between APs and ISE it may due to the traffic not traversing the same path each time. If APs are placed in a dedicated vlan a possible workaround is to lower the mtu for that vlan.

Massimo Baschieri · 09-27-2023

Among the others check MTU, almost all the time I had similar issues it was because of mtu. If you have the chance to move temoporary to PEAP and it works it's for sure a mtu issue

Member Since	‎10-19-2005 09:42 PM
Date Last Visited	‎04-24-2024 12:05 AM
Posts	232
Total Helpful Votes Received	97

User Statistics

User Activity

Unable to remove radius-server attribute command

Firesight security intelligence vs umbrella

2960X and AP1242 bad couple?

WPA2/AES and WPA/TKIP

Same wlan both locally switched and centrally switched

Re: Cisco FPR 7.2.5 ACP filter user per AD/LDAP users

Re: ISE certificate renewal

Re: Cisco FTD - How to bypass traffic Inspection

Re: Cisco ISE - 5440 - Endpoint abandoned EAP session and started new

Re: Cisco ISE - 5440 - Endpoint abandoned EAP session and started new