About Darkmatter

Darkmatter · 07-20-2023

So i run a hotspot guest portal with it's proper SSID, but WLAN and guest portal are on separate networks.So guest WLAN is on let's say 10.10.10.0/24 and the guest portal is on 10.20.20.0/24Have Webauth redirect configured and working fine, together ...

Darkmatter · 03-14-2023

So today, i tried to upgrade our current ISE 2.7 to 3.2 with OVA deployed to a new VM and then did a restore config + import certificates so i could reuse ip address and hostname (after deregistering the secondary node and powering off)Goal was to up...

Darkmatter · 02-22-2023

I'm wondering if URT can be run well in advance before you do your upgrade, or is it supposed to be part of your upgrade process, where you run URT and directly after if everything is ok, start your actual upgrade?My plan was do run URT, see what the...

Darkmatter · 02-02-2023

The thing is that ISE is sending out email notifications to recipients that are not configured.So we have a specific shared mailbox getting all these notifications while i didn't specify this mailbox at all.Checked under general Alarm Configuration a...

Darkmatter · 06-29-2022

It's the first time i'm setting up guest portal on ISE, so please bear with me. Physically, the GUEST network will be isolated from the LAN and residing in the DMZ, for which i'm planning to use a dedicated interface on the WLC that will host the new...

Darkmatter · 09-19-2023

Summer holidays went by and didn't had much time to spent on it during this period, but picking it up again.ISE 3.2 patch 3 and IOS XE17.6.5 on WLC 9800.CoA success log is visible, AAA override and NAC state ISE is configured on the WLC.The thing is ...

Darkmatter · 07-20-2023

Strange enough, i don't see any CoA happening, although WLC is configured for that?ISE 3.2 - WLC version 17.6.xHave to check the AAA override and NAC as i'm not sure about that, but it should.

Darkmatter · 07-20-2023

So the NAD for wireless is a WLC-9800 and CoA is configured.Don't see any failed CoA logs though.

Darkmatter · 06-06-2023

Last piece of the puzzle is DNS and NAT, how to go about that?As we want to use a public certificate, the traffic should be NAT'ed to the actual guest portal FQDN's, but it don't directly see how to accomplish this best practice on a 2 node deploymen...

Darkmatter · 06-05-2023

Thanks a lot, Rob! This was of great help to get a good overview.Last question, though: what if you can't use a wildcard certificate? Request a normal cert with both PSN as SAN? How to go about with DNS?

Member Since	‎12-12-2016 12:29 AM
Date Last Visited	‎10-19-2023 02:47 AM
Posts	54
Total Helpful Votes Received	61

User Statistics

User Activity

ISE guest portal weird behaviour

Backup / restore ISE upgrade 2.7 to 3.2

Running URT pre-upgrade ISE 2.7 to 3.2

Cisco ISE Alarms email notification issues

Guest portal interfaces question

Re: ISE guest portal weird behaviour

Re: ISE guest portal weird behaviour

Re: ISE guest portal weird behaviour

Re: CWA design with 2 ISE deployments (Certificates, dns )

Re: CWA design with 2 ISE deployments (Certificates, dns )