About donnie

donnie · 02-23-2022

Hi all, I have just inherited a setup where there are 2x AIR-CT3504-K9 managing 53x AIR-AP2802I-S-K9 access points. For the 3504 WLCs i notice there are 2x license subscription as indicated below that will be due soon. Will it cause any wifi outage i...

donnie · 05-12-2021

Hi all, I have a cluster of 2x FTDs running on 2130 with version 6.4.0.9 which is managed by my FMC. In the threat defense policy which is applied to my FTD cluster, the Secure shell settings in my platform settings is blank but i am able to ssh into...

donnie · 03-10-2021

Hi all,I am trying to configure login to my checkpoint and firepower firewalls using cisco ISE ver2.7 as radius.Can anyone share any link or sample as to how can i configure my policy on Cisco ISE to facilitate the administrative login to my firewall...

donnie · 09-24-2020

Hi all, I have a site to site vpn between Cisco ASA 5540 (with private subnet 192.168.2.0/24 connected to this firewall) and Checkpoint firewall (with private subnet 192.168.1.0/24 connected to this firewall). Site to site vpn is configured to be est...

donnie · 08-01-2020

Hi all, My 802.1x environment consist of 2x Cisco ISE (primary and secondary) units with windows AD. My AD is configured with GPO which is applied to my users machine to dictate how they would authenticate against my cisco ISE as shown below.1) usin...

donnie · 02-23-2022

Hi Scott, Thank you for the clarification. This means that as long as my WLCs manage less than 150 APs, i do not need the following subscription right?1) LIC-CT3504-1A (Cisco 3504 Wireless Controller 1 AP Adder License)

donnie · 09-25-2020

Hi Rob, Tested and verified that enabling NAT exemption resolve the connectivity issue from 192.168.2.0/24 (ASA) to 192.168.1.0/24 (Checkpoint). But curious why return traffic from 192.168.2.0/24 (ASA) is able to work whenever 192.168.1.0/24 (checkpo...

donnie · 09-24-2020

Hi Rob, If NAT exemption is the case, then traffic frm 192.168.2.0/24 (ASA) shld have an issue whenever 192.168.1.0/24 (checkpoint) initiated traffic to 192.168.2.0/24. But 192.168.1.0/24 can access 192.168.2.0/24 successfully for Web service and fi...

donnie · 08-03-2020

Hi Marvin, With reference to my attached logs, there were no failure of any kind for my primary node. But "dynamic authorization failed" is still seen on my secondary node which is puzzling.

donnie · 04-14-2020

Hi Baqari, No port-channel configuration for both affected interfaces. Both interfaces are connected to different network. Fiber cabling and fiber module have been removed and tested for other connectivity and verified working. Thanks.

Member Since	‎09-11-2007 01:04 AM
Date Last Visited	‎03-02-2022 06:16 PM
Posts	353
Total Helpful Votes Received	1

User Statistics

User Activity

LIC-CT3504-UPG and LIC-CT3504-1A

Access to Cisco FTD via SSH

Using Cisco ISE as radius for administrative login to firewall

Site to site vpn Cisco ASA 5540 ver9

Strange events after upgrade of Cisco ISE

Re: LIC-CT3504-UPG and LIC-CT3504-1A

Re: Site to site vpn Cisco ASA 5540 ver9

Re: Site to site vpn Cisco ASA 5540 ver9

Re: Strange events after upgrade of Cisco ISE

Re: Firepower FTD interface bandwidth step down from 10Gbps to 1Gbps