About elemzy

elemzy · 10-25-2023

Hi,I have a site in DNAc for which I have created and assigned a network profile for DayN provisioning. This site, however, has multiple switch models, 9300-48 and 9300-24. Knowing that I can assign only one profile to a site, how can I have differen...

elemzy · 11-14-2022

Has anyone gotten DNS to work over the diagnostic interface on FTD version 6.6.5?Gone through the steps, but FTD will not resolve names configured in policies via the diagnostic interface. I don't want to use the data interfaces as they are isolated ...

elemzy · 09-22-2021

Hi,Is there anyone that can point me in the right direction of how to create access policies on FMC based on information from pxGrid, when ISE is using machine-based authentication? From what I learnt, since machine authentication logs the user as ho...

elemzy · 06-13-2019

Is there a way to have active/backup vti tunnels to two different Data-Centers without using two active crypto settings? I currently have two crypto setup; one to each DC, two vti tunnels to either DC, IP sla to track the status of the active and EEM...

elemzy · 04-11-2019

Can anyone help with a technical reason why hsrp should not be extended across DCs, asides from not recommended by Cisco, Latency and non-optimal reasons?I have OTV across my 2DCs using ASR1ks and a pair of 5ks in the data centers. At the moment I ha...

elemzy · 10-26-2023

Will try this out.Thanks.

elemzy · 10-26-2023

Worked like a charm. Same site, same profile, different templates with unique characteristics, different tags based on a chosen device identifier.Thanks.

elemzy · 11-30-2021

Hi Rob,Your response does not include an answer to if FTD stores the user in its local cache or has to query FMC for every session. This will help understand what happens when FTD loses connectivity to FMC. Please share any relevant documents.

elemzy · 09-25-2021

Thanks for your response, Rob.Using the computer ID in the ISE access rule will defeat the ability to log activities based on the user name. I might be limited to using SGT here. What I'm shying from is having to break down the domain computer/authen...

elemzy · 09-23-2021

thanks Tim,Does this mean Im limited to PEAP authentication only when using ISE active authentication? Or do you know of any other option?What do you mean by reach out to the FMC team? Through an official Tac case?

Member Since	‎06-20-2014 04:51 AM
Date Last Visited	‎11-02-2023 11:36 AM
Posts	37
Total Helpful Votes Received	16

User Statistics

User Activity

Single Site, different switch models

DNS through FTD diagnostic

FMC Integration with ISE pxGrid with machine based authentication

Redundant VTI Tunnels

Cisco OTV and FHRP Isolation

Re: Single Site, different switch models

Re: Single Site, different switch models

Re: FMC/FTD Identity Awareness query about user to ip mappings

Re: FMC Integration with ISE pxGrid with machine based authentication

Re: FMC Integration with ISE pxGrid with machine based authentication