Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About scottwilliamson
Stats
Member since
05-24-2005
206
Posts
23
Helpful
1
Solution
Created by
scottwilliamson
in Network Security
in Network Security
09-01-2017
02:33 AM
09-01-2017
02:33 AM
I should also say this is on an ASA 5545-X running version 9.7(1)
... View more
Created by
scottwilliamson
in Network Security
in Network Security
09-01-2017
02:28 AM
09-01-2017
02:28 AM
Hi, I am required to add a rule that will allow any device to be able to browse to an FQDN and have a specific outside address for that traffic. As is know you cannot have an FQDN in the NAT destination field. Are there any workarounds for this? Many Thanks Scott
... View more
- Tags:
- fqdn
- nat
- workaround
Labels:
Created by
scottwilliamson
in Network Access Control
in Network Access Control
07-15-2014
07:46 AM
07-15-2014
07:46 AM
Hi all, We have ACS 5.1, WLC 7.0.98.0 and EAP-TLS. Wireless clients trying to access the network via one of our WLC 5508s are not getting authenticated. I can see the following on ACS: "11514 Unexpectedly received empty TLS message; treating as a rejection by the client" which usually means certificate errors / CA problems but clients coming on via other controllers are fine. Any suggestions? I saw another post which suggested to check the time and discovered that the controller in question was an hour out as the time delta was not set the same as other controllers. However correcting this has not helped. Many Thanks Scott
... View more
- Tags:
- ACS EAP-TLS wireless
Labels:
Created by
scottwilliamson
in Network Access Control
in Network Access Control
01-22-2014
07:03 AM
01-22-2014
07:03 AM
Hi all, Can someone please tell me how to install a CA and a new certificate on our secondary ACS 5.1 (5-1-0-44-6) server? Do you have to promote the server to primary or is there some other way. Many Thanks, Scott
... View more
Labels:
Created by
scottwilliamson
in Network Management
in Network Management
01-09-2014
08:38 AM
01-09-2014
08:38 AM
Hi Afroz, That's the type of answer I was hoping for, many thanks. Regards, Scott
... View more
Created by
scottwilliamson
in Network Management
in Network Management
01-09-2014
06:03 AM
01-09-2014
06:03 AM
Hi folks, Our old CWLMS 3.2.1 is getting short on disk space, it has been suggested that the directories named 731, 732 and 733 on the D: drive could be deleted. The three directories seem to have the same subdirectories (see attached), were all created in February 2012 and are using up around 5Gb of space each. I have no idea whether these three directories are crucial to the operation of Ciscoworks or whether they are the remnants of some maintenance actions; in short, can I delete them? Thanks, Scott
... View more
- Tags:
- ciscoworks
- disk
- space
Labels:
12-11-2013
03:30 AM
Hi Folks, Does anyone have any experience of routing with the 2960XR, particularly OSPF? Thanks Scott
... View more
Labels:
08-27-2013
08:33 AM
Hi All, Our server development team have a requirement to have the same subnet in two different locations (apparently it will facilitate the deployment of DR servers and such) that is served by 6509s and a routed link between. Is there a technique or feature we can use to accomodate them that is available on the 6509, perhaps a tunneling protocol of some kind? I've read briefly about OTV but this seems to be available on ither (higher end?) kit such as the Nexus switches. Is HSRP a possible solution (we could arrange a L2 link between the two sites)? The 6509s are running s72033-ipservicesk9_wan-mz.122-33.SXJ2 at one site and s72033-ipservicesk9_wan-mz.122-33.SXI5 at the other. Both have the VSS operational. Many thanks in advance for any suggestions or even confirmation that such a thing cannot be done on our current configuration. Regards, Scott
... View more
Labels:
Created by
scottwilliamson
in Other Network Architecture Subjects
in Other Network Architecture Subjects
10-01-2012
08:07 AM
10-01-2012
08:07 AM
Hi, I've been tasked with designing an HSRP solution for one of our sites and I seem to have hit a snag when tracking a route. In the situation where an intermediate link goes down resulting in the most efficient route being via the Standby router so I want that router to become the Active. But, because we use OSPF, the Active and Standby roles do not change as the route tracked is always reachable as far as the Active router is concerned, so the traffic bounces from the Active to the Standby (via the LAN) and across the WAN. Has anyone else came across this? How did you resolve the problem? Many Thanks, Scott
... View more
- Tags:
- hsrp
Labels:
03-22-2012
09:24 AM
Hi All, I finally got around to trying this again and I can confirm that with v8.2(3) and using the regex config from Roderick above my ASA is now logging what appears to be the full urls of sites. I didn't have to do anything with DNS either. Thanks for everyone's input. Regards, Scott
... View more
Created by
scottwilliamson
in Wireless Security and Network Management
in Wireless Security and Network Management
01-30-2012
01:10 AM
01-30-2012
01:10 AM
Thanks Richard, that's worth keeping in mind if our 4402 pegs out.
... View more
Created by
scottwilliamson
in Wireless Security and Network Management
in Wireless Security and Network Management
01-26-2012
05:30 AM
01-26-2012
05:30 AM
Thanks Scott, Ah, if only. Regards, Scott
... View more
Created by
scottwilliamson
in Wireless Security and Network Management
in Wireless Security and Network Management
01-26-2012
02:54 AM
01-26-2012
02:54 AM
Hi All, We currently tunnel guests to a 4402 that sits behind our firewall and it's been working well for a few years but I am aware that the 4402 is now EoL so I am exploring alternatives: We also have several 5508s deployed and I'm wondering if - in any new guest access config - I can allocate one of its free h/w ports to connect to the firewall, even though the 5508 is configured to use LAG. To put it another way can I configure a new port to a seperate VLAN and not be part of the the LAG'd ports or are you tied to having all ports acting as a group if LAG is switched on? It might be a basic piece of knowledge but I really don't know. Many thanks, Scott
... View more
WLC Web Auth Cert. and DNS for virtual ...
in Wireless Security and Network Management
10-25-2011
12:55 AM
10-25-2011
12:55 AM
Hi Again, To add to the mix - I had an opportunity to try changing the virtual interface IP to 239.192.1.1 on a 3750 WLC. It gave me the response: 'Unable to set the IP address on the interface', but rebooting it seems successful, ie the new address is on the VI. Any thoughts? Thanks, Scott
... View more
WLC Web Auth Cert. and DNS for virtual ...
in Wireless Security and Network Management
10-14-2011
02:16 AM
10-14-2011
02:16 AM
Hi Folks, I'm having trouble setting the new virtual interface address; when I try to configure it as 239.192.1.1 the WLC responds with 'Unable to set the IP address on the interface.' I've tried some other addresses and I get various results: (Cisco Controller) >config interface address virtual 1.1.1.1 Please reset the system for the change to take effect. (so this is a valid/acceptable address for the WLC) (Cisco Controller) >config interface address virtual 237.2.2.2 Unable to set the IP address on the interface. (doesn't like this one) Seems it doesn't like the non routable IP addresses - I've tried it on a spare 5508, when you look at the interface summary the new address is there but rebooting makes it revert to the previously configured address and, yes, I did save the config. any suggestions? Thanks Scott
... View more
Created by
scottwilliamson
in Network Security
09-01-2017
09-01-2017
I should also say this is on an ASA 5545-X running version 9.7(1)
Created by
scottwilliamson
in Network Security
09-01-2017
09-01-2017
Hi, I am required to add a rule that will allow any device to be able to
browse to an FQDN and have ...
Created by
scottwilliamson
in Network Access Control
07-15-2014
07-15-2014
Hi all,We have ACS 5.1, WLC 7.0.98.0 and EAP-TLS. Wireless clients
trying to access the network via ...
Created by
scottwilliamson
in Network Access Control
01-22-2014
01-22-2014
Hi all,Can someone please tell me how to install a CA and a new
certificate on our secondary ACS 5.1...
01-09-2014
Hi folks,Our old CWLMS 3.2.1 is getting short on disk space, it has been
suggested that the director...
12-11-2013
Hi Folks,Does anyone have any experience of routing with the 2960XR,
particularly OSPF? ThanksScott
08-27-2013
Hi All,Our server development team have a requirement to have the same
subnet in two different locat...
Created by
scottwilliamson
in Other Network Architecture Subjects
10-01-2012
10-01-2012
Hi,I've been tasked with designing an HSRP solution for one of our sites
and I seem to have hit a sn...
03-22-2012
Hi All,I finally got around to trying this again and I can confirm that
with v8.2(3) and using the r...
Created by
scottwilliamson
in Wireless Security and Network Management
01-30-2012
01-30-2012
Thanks Richard, that's worth keeping in mind if our 4402 pegs out.
Created by
scottwilliamson
in Wireless Security and Network Management
01-26-2012
01-26-2012
Thanks Scott,Ah, if only.Regards,Scott
Created by
scottwilliamson
in Wireless Security and Network Management
01-26-2012
01-26-2012
Hi All,We currently tunnel guests to a 4402 that sits behind our
firewall and it's been working well...
Created by
scottwilliamson
in Wireless Security and Network Management
10-25-2011
10-25-2011
Hi Again,To add to the mix - I had an opportunity to try changing the
virtual interface IP to 239.19...
Created by
scottwilliamson
in Wireless Security and Network Management
10-14-2011
10-14-2011
Hi Folks,I'm having trouble setting the new virtual interface address;
when I try to configure it as...
Public Statistics
| Date Registered | 05-24-2005 04:12 AM |
| Date Last Visited | 08-01-2018 02:27 AM |
| Total Messages Posted | 206 |
| Total Helpful Votes Received | 23 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 2 | |
| 4 | |
| 3 | |
| 3 |
.jpg "Hall of Fame Guru"){kind=icon}
.jpg "VIP Expert"){kind=icon}
