Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About hslai
hslai
Member since
12-03-2009
Cisco Employee
Created by
hslai
in Policy and Access
in Policy and Access
05-17-2019
06:58 PM
05-17-2019
06:58 PM
See ISE Device Administration Prescriptive Deployment Guide > ASDM Defined User Roles
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-17-2019
06:52 PM
05-17-2019
06:52 PM
I believe you are correct on this. 802.1X and MAB support seem fairly new in NX-OS so likely limited in feature support. I would suggest to try assigning an SGT.
... View more
05-17-2019
05:36 PM
With the info given, please start with these articles:
Recovering from ErrDisabled port due to... - Cisco Community
Errdisable Port State Recovery on the Cisco IOS Platforms - Cisco
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-17-2019
03:50 PM
05-17-2019
03:50 PM
No, that is not possible to define an empty user name in the filter.
... View more
05-17-2019
03:11 PM
I moved your post to Firewalls, as it's specific to ASA.
I usually use "show run object group". Also see Finding what object groups an ip addres... - Cisco Community
... View more
05-17-2019
01:11 PM
No, that would not work. ISE Admin CLI and Web UI have different sets of users and credentials. In ISE Admin CLI, we may reset the password of an ISE Admin Web UI user, however, by "app reset-passwd ise <WebUI-AdminUser-Name>"
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-15-2019
04:56 AM
05-15-2019
04:56 AM
It looks mutually exclusive so you would need separate accounts for them.
Configuring TACACS+ on the ACS mentioned,
Note
You should not combine the MONITOR role or the LOBBY role with any other roles. If you specify one of these two roles in the Custom Attributes text box, users will have MONITOR or LOBBY privileges only, even if additional roles are specified.
... View more
05-14-2019
06:29 PM
I moved your post to Firewalls forum
Please check out some previous post and articles related to your inquiry:
Solved: Prioritize VoIP on ASA - Cisco Community
QoS on the Cisco ASA Configuration Examples - Cisco
ASA QoS - Cisco Community
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-14-2019
06:20 PM
05-14-2019
06:20 PM
In ISE Admin Web UI > Operations > Reports > Reports > Endpoints and Users, the report "Current Active Sessions" has columns on
License Type
License Details
You might need to use the cogwheel settings icon in the upper right corner to select them.
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-14-2019
10:00 AM
05-14-2019
10:00 AM
This depends on how the certificates are checked. If the deployment using AnyConnect NAM and EAP-Chaining, both credentials should be checked even in re-auth.
... View more
05-12-2019
12:01 AM
tac_plus is not a Cisco product and please either read its documentation or seek support in its user communities.
3.3 Authentication to tac_plus.conf might be of interest.
... View more
05-11-2019
11:55 PM
This only works on the primary instance. If you still getting errors, please open a case with Cisco TAC.
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-11-2019
11:45 PM
05-11-2019
11:45 PM
Please describe exactly the steps you followed to arrive with such error. If needed, please engage Cisco TAC support.
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-11-2019
11:36 PM
05-11-2019
11:36 PM
What nspasov wrote would work for both SNS hardware appliances and ISE virtual appliances.
We may mix different SNS appliances and VMs in the same deployment. Please read the sizing chart to plan accordingly.
... View more
Created by
hslai
in Policy and Access
in Policy and Access
05-11-2019
11:25 PM
05-11-2019
11:25 PM
ACS 4.x Versus ACS 5.8 Logging shows to use Remote Syslog Server Target instead.
... View more
Saturday
Assuming the screen taken during the ISO installation, then this
previous discussion might help: Sol...
Friday
/opt : 100% used ( 171294636 of 180485852) This looks like a VM with ~
200-GB HD and too small for M...
Friday
ISE is not restricting to use the same host in multiple logging targets.
If this is not your issue, ...
Friday
We've seen a few issues with CAs using cross Root CA. Check whether the
Root CA is Apple iOS -- List...
Friday
Second to RaffyLindogan. It would worth to review Cisco Wireless LAN
Controller (WLC) Configuration ...
Friday
ISE Posture service is supporting some of its Antivirus or endpoint
security and its patch managemen...
Friday
Mike.Cifelli is correct on this. Note that an ISE node may use different
server certificates for adm...
Friday
If you would like to check it yourself, then go to Administration >
System > Logging > Debug Log Con...
Friday
Ensure to configure the authentication to drop in case of process
failure. If still not helping, ple...
Friday
I believe you are correct on this. 802.1X and MAB support seem fairly
new in NX-OS so likely limited...
Friday
With the info given, please start with these articles: Recovering from
ErrDisabled port due to... - ...
Created by
hslai
in Policy and Access
Friday
Friday
No, that is not possible to define an empty user name in the filter.
Public Statistics
| Date Registered | 12-03-2009 07:31 AM |
| Date Last Visited | |
| Total Messages Posted | 3,053 |
| Total Helpful Votes Received | 1299 |
Helpful Votes Given To
Helpful Votes From
.jpg "Hall of Fame Master"){kind=icon}
.jpg "VIP Engager"){kind=icon}
