About Leonardo Santana

Leonardo Santana · 09-17-2024

Hi, What are the DH Groups supported for FTD 7.6.X?

Leonardo Santana · 09-12-2024

Hi, We need to do a route from the branches to Azure, that when the connectivity to Azure Region A is down they can go through Azure Region B. How can we achieve that? Enviroment:2x vSmart 20.9.X2x vBond 20.9.X1x vManage 20.9.XcEdges at branches and ...

Leonardo Santana · 08-15-2024

Hi, Its possible to change the vlan assignament at the SSID using MERAKI group policies? SSID: CORP We have three different rules that will assign the authorization profile to three diferent vlans Scenario: Meraki APsCisco ISE 3.1

Leonardo Santana · 08-13-2024

Hi, What´s is the best way to authenticate the APs in flexconnect? MAB or NEAT? Version: Cisco ISE 3.3

Leonardo Santana · 08-09-2024

Hi, Our customer has two Cisco ISE deployeds like this: Gig0: Management Only (HTTPS/SSH), TACACS+/RADIUS to/from NADs and Guest We need to configure a separate interface for Guest Access in the DMZ, so the configuration will be like this: Gig0: Mana...

Leonardo Santana · 08-15-2024

Hi, Thanks for your answer, our customer just want to configure the APs with MAB. This config below will work? interface gigax/xdescription ">_MERAKI_LAN<"switchport trunk encapsulation dot1qswitchport trunk allowed vlan x,x,x,x,xswitchport mode trun...

Leonardo Santana · 08-09-2024

Rob, Like this, a ip route 0.0.0.0 0.0.0.0 pointing to he default gw of my guest network. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/cli_guide/b_ise_CLIReferenceGuide_27/b_ise_CLIReferenceGuide_27_chapter_011.html#wp3952387991 ISE Interfa...

Leonardo Santana · 08-09-2024

Hi Rob, Thanks for your answer. After configuring the ip route how ISE will select the correct interface at show ip route?

Leonardo Santana · 08-08-2024

Hi, And from DNAC release 2.3.5.3 with a 3504 controller its better to create a new acl? Enviroment 1x 3504 Controller Version: 8.10.185.0 for this customer fabric 1x DNAC 2.3.5.3 2x Cisco ISEs 3.3 Patch 2

Leonardo Santana · 08-02-2024

So we need to add the Entra ID tenant as a REST ID connection using EAP TLS? At step 9 we do not enable RPOC? https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216182-configure-ise-3-0-rest-id-with-azure-act.html

Member Since	‎06-01-2011 11:12 AM
Date Last Visited	‎09-24-2024 02:01 PM
Posts	1,555
Total Helpful Votes Received	2000

User Statistics

User Activity

Diffie-Hellman groups for FTD 7.6.X

Route redundancy for Azure

Cisco ISE with Meraki Group Policies

Cisco APs MAB

Cisco ISE dedicate Guest Interface

Re: Cisco APs MAB

Re: Cisco ISE dedicate Guest Interface

Re: Cisco ISE dedicate Guest Interface

Re: Change DNAC_ACL_WEBAUTH_REDIRECT

Re: Cisco ISE 3.2 with Azure AD