About JPavonM

JPavonM · 03-14-2024

Hi experts, I'm new into ISE and wonder if there is a way to only accept connections from wireless devices using 802.1x-PEAP by using UPN (email address) and not the ones using SAM (pre-Windows 2000 logon). Regards.

JPavonM · 02-29-2024

Hi experts, I'm new into ISE and we are going to deploy a worlwide solution for TACACS+ and authZ (ISE#2), but we already have a regional deployment in the US with 4 PSNs (ISE#1). Due to some delay issues in some countries, I'm, thinking on deploying...

JPavonM · 01-26-2024

Hi chaps, Does anybody know how to ask DNA-C for a wireless client summary for a specific area/building and SSID, AND for the last 30 days? Rerporting in DNA-C is limited to last 14 days so no way to see all data from the last month that DNA-C stores...

JPavonM · 08-26-2022

Hi chaps,I'm trying to recover a C9130 which failed to upgrade the code and now is in a loop boot, but it seems to me that the recovery process from U-Boot couldn't be the same as C9120 from this guide as C9130 is unable to ping gateway, any ideas?Re...

JPavonM · 06-24-2021

Hi community,I've been receiving many complaints from users that were unable to connect to the corporate WLAN with PEAP-TLS (but also on BYOD SSID with PEAP).After investigating I found all those sites where with AP3702. Digging into debugs, I've che...

JPavonM · 04-15-2024

SVI's do exist on C9800 but they are not needed, but one use case is to configure VRFs to isolate Guest traffic on a different VLAN. https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-12/config-guide/b_wl_17_12_cg/m_vrf-support-and-ove...

JPavonM · 04-09-2024

Is it your DNS resolution for your captive portal's URL pointing to the right appliance?

JPavonM · 04-09-2024

You must be using APs in local mode, so all traffic is forwarded to LAN from the WLC, not from the APs. HAve you mapped the Policy Profiles to the corresponding VLANs? Can you show the configuration of the Policy Profiles? HAve you attached the Polic...

JPavonM · 04-09-2024

The only way to detect missing APs is to see that in logs, either C9800 logs for CAPWAP disconnections, or monitor switchport logs for link down events. The problem is that the port maybe down, but AP CAPWAP connection down or radios down, and those ...

JPavonM · 04-09-2024

The only workaround is to use Power injectors so add that to your CAPEX. In order to enable LLDP (vendor agnostic standard) or CDP (Cisco proprietary protocol that may not work with other vendors) do "lldp run" or "cdp run", or limit that by interfac...

Member Since	‎11-28-2010 03:05 AM
Date Last Visited	‎04-12-2024 12:48 AM
Posts	950
Total Helpful Votes Received	1978

User Statistics

User Activity

Authenticate on ISE using UPN and not SAM

Create trusty relationship between 2 different Cisc ISE deployments

Get Client summary through API call

Catalyst 9130 AP U-Boot mode

Win10 with Intel AX chipset fail to connect with PMF

Re: 9800 Guest Anchor Design

Re: WLC 9800 web auth captive portal not working flexconnect

Re: Wireless Deployment

Re: 9800-WLC not showing any info about WLAN AP outage

Re: AP 3802 radios not up 9300 series poe+ switch