Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Antonio Macia
Online
Antonio Macia
Member since
01-18-2010
Beginner
11-19-2017
11:25 AM
Hello,
Indeed, frames are tagged when they get into the trunk port. Internally, the switch control to which VLAN each frame belongs to withoug being tagged.
Regards
... View more
04-28-2017
05:15 AM
Thanks for the quick response.
In my case the deployment will have multiple PSN and it's load balanced.
The idea is to keep the hostnames using internal domains and let the guests reach the PSN directly for CWA.
I've read another alternatives using the "ip host" command to map FQDN to IP addresses on different interfaces other than Gi0, but in my deployment I will have a single bond for all the services. Moreover, this looks more a workaround than a final solution.
Any ideas?
... View more
04-28-2017
03:35 AM
Very interesting post Brett and thanks for sharing your solution.
There is something I don't understand then because, if we use a certificate where the CN and the SAN matches the public URL, when the PSN replies using its internal FQDN, the browser will show a warning since it does not match the public CN or SAN of the certificate.
What I'm missing?
... View more
Created by
Antonio Macia
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
04-26-2017
11:21 AM
04-26-2017
11:21 AM
I understand this limitation but I would like to find any official documentation comparing both solutions showing this and another limitations. Do you know of any?
I've read the "Cisco Next-Generation Security Solutions" book and although they mention limitations on the type of the endpoint connector that the private cloud can support, they don't mention any restriction about malware detection.
Regards.
... View more
Created by
Antonio Macia
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
04-25-2017
11:51 AM
04-25-2017
11:51 AM
Hello there,
What are the main differences (restrictions) between using the public AMP cloud and the private cloud based on appliances like for example the AMP7150-K9? The question is more related to functionality than performance which I now is less using local appliances.
The same question goes for the Threat Grid local appliances. Differences between on-premises and cloud?
Thanks.
... View more
Labels:
04-23-2017
03:38 AM
I understand that approach and seems to be the only one valid. However, since the documentation states that the priority is configured at the WLAN level, I was wondering if we can play with those values and make both anchors active but for different SSIDs.
... View more
04-20-2017
06:03 AM
I'm a bit confused because according to the documentation:
"You can configure a priority to the guest anchor when you configure a WLAN. Priority values range from 1 (high) to 3 (low) or primary, secondary or tertiary and defined priority is displayed with guest anchor. Only one priority value is allowed per anchor WLC. Selection of guest anchor is round-robin based on a single priority value"
Although the priority is configured per WLAN, if only a single priority is allowed per anchor, then it should be the same priority for all the WLANs, correct?
... View more
Created by
Antonio Macia
in Wireless and Mobility
in Wireless and Mobility
04-18-2017
07:35 AM
04-18-2017
07:35 AM
Hello,
Having two guest anchors, would be possible to load balance the traffic of different SSIDs between them by assigning different priorities to each WLAN? For example, anchor 'A' active for WLAN 'A' with priority 1 while anchor 'B' active for WLAN 'B' with priority 1. Each anchor would backup their partner with lower priority of 3 for the other SSID.
Regards,
... View more
Labels:
04-18-2017
05:54 AM
My authorization rule now includes the Guest groups together with the Guest Flow. In this way, although the endpoint exists in the database, if the user has expired, the guest cannot longer access the network.
Let me know if it helps.
Regards.
... View more
04-18-2017
03:27 AM
Hello Massimo,
It is working. It was a miss-configuration in the load balancer forwarding the requests to the PSN.
Thanks.
... View more
04-13-2017
06:53 AM
Hello,
Is it possible to have an active-active anchor setup using one AIR-CT5508-12-K9 and one AIR-CT5508-HA-K9? Will this set up support SSO?
If it doesn't, what about active - standby?
Regards.
... View more
Labels:
Created by
Antonio Macia
in VPN and AnyConnect
09-05-2018 06:50 AM
09-05-2018 06:50 AM
Hello, I followed these two references below from MS and Cisco. Anyway,
I hopefully plan to blog the...
08-28-2018 08:18 AM
Hello, What are the ACL limits on the Firepower family running ASA code?
I've found documentation re...
Created by
Antonio Macia
in Identity Services Engine (ISE)
08-06-2018 11:54 PM
08-06-2018 11:54 PM
This is possible with Azure AD. But as the colleagues mention, only
AnyConnect -> ASA. If you have m...
Created by
Antonio Macia
in VPN and AnyConnect
08-06-2018 11:49 PM
08-06-2018 11:49 PM
Thanks Mohammed, I'll discuss this caveat with the client. Regards.
08-06-2018 07:52 AM
Hi there, Is it possible to perform SSO on mobile devices running
AnyConnect and Per-App VPN, but no...
Created by
Antonio Macia
in Identity Services Engine (ISE)
07-25-2018 11:23 PM
07-25-2018 11:23 PM
Thanks hslai, I'll do it in that way.
Created by
Antonio Macia
in VPN and AnyConnect
07-25-2018 07:24 AM
07-25-2018 07:24 AM
Hello, I'm testing SAML authentication using Azure AD as IdP and the ASA
as the SP. Login works fine...
Created by
Antonio Macia
in Identity Services Engine (ISE)
07-25-2018 07:11 AM
07-25-2018 07:11 AM
Hello, In my case posture is working fine. My problem is the combination
of the user employed for ex...
Created by
Antonio Macia
in Identity Services Engine (ISE)
07-24-2018 02:52 AM
07-24-2018 02:52 AM
Hi there, I've implemented a remote access VPN with AnyConnect and
applied posture. The ASA group po...
07-17-2018 07:10 AM
Thanks guys for the replies. It makes sense. Let's see how the ACL TCAM
performs on each model.
04-25-2018 04:07 AM
Hi there,My organization have 3850 and 3750X switches in a stack
fashion. Is the TCAM capacity of th...
Created by
Antonio Macia
in Identity Services Engine (ISE)
04-16-2018 08:57 AM
04-16-2018 08:57 AM
Thanks Gregory and hslai. I was creating the AuthZ conditions from the
Policy Set menu instead from ...
04-14-2018 11:50 AM
I agree with you. In my case this devices are at the user Access instead
ofthe data center. I will u...
04-14-2018 05:59 AM
In this case the VG224 is an endpoint like a phone, so I want to know if
ithas a supplicant as the I...
Public Statistics
| Date Registered | 01-18-2010 02:18 PM |
| Date Last Visited | 07-19-2019 12:44 PM |
| Total Messages Posted | 108 |
| Total Helpful Votes Received | 11 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
.jpg "VIP Advocate"){kind=icon}
