About TerenceLockette

TerenceLockette · 01-22-2024

Hello,I have a couple of questions regarding the potential for moving to ACI for a greenfield deployment. To give a little bit of background, our environment is small in comparison to others. We have a single data center that houses approx. 340 VMs...

TerenceLockette · 10-13-2023

Hi all,I am running FMC 7.2.4 that manages a pair of 2140 FTDs used for dedicated VPN connections (remote access and site-to-site). Yesterday I made an attempt to configure a route-based VPN to AWS and mistakenly added the VTI to a security zone (VP...

TerenceLockette · 07-02-2023

Hello,I'm setting up a Catalyst 9800CL WLC and I have it working as needed with 2 SSIDs. I'm adding a 3rd SSID just as I did the others along with a new VLAN (no SVIs on the 9800 as my ASA firewall is acting as the gateway and DHCP relay server for ...

TerenceLockette · 04-24-2023

Hello,I have a scenario that I'm not sure how unique of a requirement this may be compared to how others implement IPsec tunnels for route-based VPNs on the FTD managed by FMC. We have network environments at a branch office that requires separation...

TerenceLockette · 03-25-2023

Hello all,I have implemented EAP chaining using the AnyConnect NAM module for domain-joined machines which is working as expected. What is not working is when I attempt to connect a non-domain computer to a port configured for dot1x and mab. The ma...

TerenceLockette · 01-22-2024

Thanks. I actually opened a TAC case for this and the actual fix was the following:- The script did not identify any duplicate interfaces- We made a dummy edit on the mentioned security zone object and then the deployment began to work in security z...

TerenceLockette · 07-02-2023

It doesn't make any sense to me but using this analyzer helped tremendously! So, as I stated in my original post, I can get DHCP for the 2 existing SSIDs no problem but wasn't getting it for the 3rd (and final) SSID. After running the analyzer, I h...

TerenceLockette · 07-02-2023

Thank you! I will give this a try and report any findings.

TerenceLockette · 07-02-2023

Flavio,I responded to your questions via email and thought they'd post here but I guess it didn't. Here are my responses to your questions. Again, I really appreciate your responses on this:Central switching and central DHCP for all SSIDs; no flex p...

TerenceLockette · 07-02-2023

Hello Flavio,All 3 SSIDs are using WPA2-Personal AES with PSK. Nothing fancy such as Dot1X or AAA authentication.

Member Since	‎07-06-2021 07:53 AM
Date Last Visited	‎01-23-2024 08:23 AM
Posts	18
Total Helpful Votes Received	2

User Statistics

User Activity

Questions about ACI from a real world Perspective

Too Many Interfaces in Security Zone or Interface Group - FMC

Adding new SSID & VLAN to Catalyst 9800CL Not Working

Multiple VTIs using same tunnel source & destination on FMC

ISE Wired Guest Fallback Authorization for Non-domain Machines

Re: Too Many Interfaces in Security Zone or Interface Group - FMC

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working