About mattw

mattw · 07-14-2023

Hello! I'm currently in the process of setting up a DR (1+1+1) setup for a client. I've created the CSR from DNAC01 (with all the required FQDNs and IPs in the SAN), got it signed by their CA, and imported the signed cert into DNAC01. Tidy. Problem i...

mattw · 01-17-2023

Hello, I need to export all the Endpoint ID Groups and members from one ISE cluster and import into another. I've used context visibility to filter for endpoints in the group and then export them. However, there are not as many endpoints as when I go...

mattw · 11-11-2022

Hi, I'm getting my moneys worth from the community this week I have a 9800-40 WLC running 17.3.4c which is integrated with DNAC for SDA. Fabric wireless works fine apart from micro-segmentation with SGTs. If I log into the WLC and run a "show cts en...

mattw · 11-10-2022

Hello! I'm setting up a new SDA environment for a customer. They have DNAC 2.3.3.5, ISE 3.1p3, 9500 borders running 17.6.4 and WS-C3650-12X48FD edge switches running 16.12.3s (currently only 2x test edge switches). I noticed in the ISE RADIUS live lo...

mattw · 11-07-2022

Hello, I'm working on a new SDA deployment with a customer. They have a single DNAC running 2.3.3.5, ISE 3.1, borders are 2x 9500-48Y4C running 17.6.4 and Edge switches are WS-C3650-12X48FD running 16.12.3s. When I LAN automate, in the LA section of ...

mattw · 09-21-2023

Hi @Sidney Cheng, No, I wasn't able to export the cert with PVK from DNAC01. In the end I used a random Linux server to generate the PVK and CSR using openssl, got it signed by the CA, then created a PKCS12 on the Linux server and imported that into ...

mattw · 02-01-2023

Hi @sajidabbas, I've just tested it on ISE 3.1 patch 1 (yes I need to apply the latest patch!) and it works fine. I found the following code to be the neater in execution: <script>jQuery(function(){jQuery('#page-login').css('display','none');jQuery('...

mattw · 01-17-2023

Thank you @Charlie Moreton but that still didn't show all members of an ID group (I think it only shows members that ISE has seen active on the network). @Rob Ingram's solution of using the REST API does the trick and shows all members of a group eve...

mattw · 01-17-2023

@Rob Ingram, BEAUTIFUL! Thank you sir! That should do it!

mattw · 01-17-2023

Hi @Rob Ingram, Thank you for your suggestion. This was the first thing I tried but with over 1 million endpoints known by ISE the exported file was 626MB and Excel couldn't open the entire contents. I could however open into Notepad++ and this also ...

Member Since	‎06-24-2021 03:43 AM
Date Last Visited	‎12-07-2023 02:24 AM
Posts	65
Total Helpful Votes Received	50

User Statistics

User Activity

How to export the system certificate with the private key from DNAC?

ISE - How to export ALL endpoints in an identity group?

Dynamic Authorization Failed #CTSREQUEST# (SDA 9800 WLC & ISE)

SDA Trustsec Issues

LAN Automation - Have to AUTHORIZE via PNP page??

Re: How to export the system certificate with the private key from DNA

Re: Login page auto-redirect to create an account page

Re: ISE - How to export ALL endpoints in an identity group?

Re: ISE - How to export ALL endpoints in an identity group?

Re: ISE - How to export ALL endpoints in an identity group?