About Amar_Tufo

Amar_Tufo · 11-26-2024

Hello all, I'm asking for bit of guadiance in QoS implementation for SDWAN, in a hub and spoke topology, where both have mpls and internet tloc's. Service side for hub and also spoke are in one VPN 10. On brach side the default VLAN1 is in the VPN10,...

Amar_Tufo · 03-04-2024

Hello everybody,We are expiriencing lately hughe number of High auth latency alarms on our Ise deployment. Version 3.2 with patch version 3.The use scenario is as follows. We use ISE as an radius server for ssh logins on remote devices, and on that b...

Amar_Tufo · 01-23-2023

Dear all,I'm particularly new on the ISE field, so pardon me if I'm explaining something wrong. I'll write only about wired endpoints.Can someone please guide me further because I fell like I'm hitting the end in a case where I'm having multiple endp...

Amar_Tufo · 01-10-2023

Good day to you all,we have a very strange situation, currently using two ise nodes (ver 3.0 patch nr 6), one set as primary the other one as secondary. We migrated a lot of NADs to snmp v3 and also updated the NADs configuration inside ISE with the ...

Amar_Tufo · 12-26-2022

<span;>I would like to request for some help with finalizing my cisco catalyst wlc 9800 configuration. The case is that we have configured two different vlans and different SVI for those vlans, with different subnets of course. <span;>One is used for...

Amar_Tufo · 09-26-2025

For anyone stubmling on the issue.You have to disable certificate revocation check on workstations with adding dword to regedit path. Microsoft's workaround for this is to set a registry key to disable CRL checks for EAP-TLS: PATH: HKEY_LOCAL_MACHI...

Amar_Tufo · 09-26-2025

I run into the same problem like described in this post here after we deployed the authentication mechanism to our dislocated branches. We firstly thought that large mtu frames caused our problems of sudden DE authentication statuses of workstations,...

Amar_Tufo · 09-11-2025

after enabling IP overlap under flexprofile, no problems occured.

Amar_Tufo · 08-01-2025

I'm not sure why but I had to disable this feature for policy configuration to be able to share the same IP scope for multiple different remote locations that run in flex mode. while this being enabled clients stuck in IP learn state the whole time, ...

Amar_Tufo · 11-28-2024

For future researches. We managed to resolve our issues, with the belowed mentioned:1. Localized policy for both hub and spoke, they are different of course depending on the underlay.2. The Localized policy on the spoke contained a QoS Forwarding cla...

Member Since	‎07-18-2021 11:27 PM
Date Last Visited	‎09-19-2025 07:05 AM
Posts	27
Total Helpful Votes Received	4

User Statistics

User Activity

QoS implementation sugestions for SDWAN

High Authentication Latency for Radius

Endpoints not hitting do1x auth policy

SNMP request failure

Cisco Catalyst WLC C9800 inter SVI connectivity

Re: CISCO ISE - Radius Failed Authentications

Re: ISE Wired Supplicant CRL/OCSP Check Issue

Re: WLC 9800 Feature ip-mac binding

Re: WLC 9800 Feature ip-mac binding

Re: QoS implementation sugestions for SDWAN