Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,We have a strange issue where devices that are in an identity group on ISE which in turn get authorised and download a DACL are falling off the network at seemingly random times.Example Switchport:interface GigabitEthernet2/0/23description "Exampl...
Hi,I am tidying up old endpoint profiling policies and associated endpoint groups.I have ran into 2 issues.Issue 1I have a profiling policy, lets call it policy1. It has been disabled under Profiling Policies and I have exported all known endpoints v...
Hi,Not sure if this is the correct location to post this, but we are experiencing some problems within our network.The problem relates to Mitel IP Phones and MAC address pass through from a laptop at the other end of said phone back to the switch.Its...
Hi,I have config archive configured, see below, it is showing as connected: But there are no files in the directory:Are there ways to verify on DNAC if files are transferred?CheersIain
Hi,We are experiencing an authorization issue when entering a certain command in our global config on to fresh switches via the console cable.Switch Model = 9300Switch Ver = 17.9.4aAlthough this seems to be happening on other switches and versions as...
Sorry no, not exactly, I had to fix it again by removing it from the authz profile that had the dacl into another which had no dacl.When I do that, bounce the port the device all of a sudden has its IP again.Then I moved it back to the original authz...
Hi Christian,I was able to get 2 devices back working again, by moving them to different ISE groups (then moving back after).captured the below:BEFORE CHANGING IDENTITY GROUPS ON ISE (CLIENT1)!CLIENTMAC! = MAC of Client 1!CLIENT-IPv4-address! = Legit...
Hi David,Funny that is something I have on a list of improvements to make to our ISE deployment, still figuring it all out, but read that accounting thing on a blog somewhere last month and plan to change it.It has a reserved DHCP address from the DH...
Hi Christian,Ok, good idea leaving it to last.Yes the only ipv6 reference on there is a default vrf command which I believe is there by default?vrf definition Mgmt-vrf!address-family ipv4exit-address-family!address-family ipv6exit-address-family!It i...
Hi Christian,Thanks for your detailed response. HW platform and SW versions = 9300 v17.12.05 & v17.09.05These are using IPv4In relation to the closed mode comment, I meant that we were transitioning from Open to Closed mode accross the estate over t...