About Laurent Aubert

Laurent Aubert · 02-09-2018

Hi,I have an environment where my authenticator is an IOS router and my supplicant an IoT endpoint. I'm trying to do EAP-TLS to authenticate the endpoint.The authenticator will send the first EAP-Request to get the supplicant Identity with an EAP Id ...

Laurent Aubert · 02-07-2018

Hi,Is there a way to configure ISE not to send the full certificate chain during the Server Hello phase ?My supplicant is a sensor with very limited memory and can't store a full certificate chain. Thanks.

Laurent Aubert · 02-08-2017

Hi, I would like to leverage the Mobile App to upload the bootstrap config for a router which use 4g as a backhaul network. Challenge is the 4g cellular interface configuration requires some interactivity: IR800#cellular 0 lte profile create 1 jas...

Laurent Aubert · 03-15-2011

Based on RFC 4448, an Ethernet PW can operate in two different modes:- Raw mode or VC Type 5- Tagged mode or VC Type 4The main difference is in raw mode the service delimiter (SD) tag (outer tag) must not be propagated and in tagged mode the service...

Laurent Aubert · 02-10-2018

HiI understand all of this. My question is if both ISE and the client are sharing the same root CA, I must import it so ISE can authenticate the client which sends only it's identity certificate. Can I also configure ISE at the same time not to send ...

Laurent Aubert · 02-09-2018

If I use an Intermediate CA to issue the certs for my clients, do I need to import both the intermediate and the root ca in ISE or just the Intermediate CA ?As ISE certificate was issued by the Root, I can't import it so ISE will only send its certif...

Laurent Aubert · 02-08-2018

HI,Unfortunately, this is not an acceptable solution. The same Root CA will also issue the certificates for the endpoints.Are you saying there Is no way to change this behavior ?Thanks,

Laurent Aubert · 06-04-2012

As the layer 2 and 3 headers don't change, I'm not expecting a fair load-sharing over the links member of the bundle. L3 load-balancing may be a better approach here.My 2 ctsLaurent.

Laurent Aubert · 12-12-2011

Hi Rajeev,Yes this platform supports IPv6. Release choice and performance impact first depends on which IPv6 feature you want to deploy and your environment.You should start with the Feature Navigator to find the right release and then work with you...

Member Since	‎11-24-2008 06:30 PM
Date Last Visited	‎07-11-2022 11:21 AM
Posts	1,070
Total Helpful Votes Received	700

User Statistics

User Activity

ISE 2.3 EAP message format

ISE 2.3 and certificate chain for EAP-TLS service

APIC-EM PnP bootstrap configuration template

EoMPLS VLAN Tag Manipulation.pdf

Re: ISE 2.3 and certificate chain for EAP-TLS service

Re: ISE 2.3 and certificate chain for EAP-TLS service

Re: ISE 2.3 and certificate chain for EAP-TLS service

Re: IPv6 Etherchannel : Workaround

IPv6 on CIsco 7200 VXR series router