About Tai Eric

Tai Eric · 12-14-2016

According to Cisco document " Cisco Identity Services Engine Network Component Compatibility, Release 2.1" , it stated that limited support with Cisco WLC 4400 on feature of AAA and Guest service but it doesn't provide any detailed information of wha...

Tai Eric · 07-08-2014

Hi Experts,I have recently deployed a ISE iPEP in front of a Aruba WLC in bridge mode. After user pass authentication on Aruba WLC, I can see from Monitoring node that the employee role have been granted to the userand a "permit any any acl" has been...

Tai Eric · 06-18-2014

Hi experts.I have recently deployed ISE with machine authentication. However, when the machine is already plugged in to the switch before booting, the machine does not authenticate automatically. It isn't until I log on, using a local computer accoun...

Tai Eric · 05-14-2014

Hi Experts, I have a question regarding ISE disaster recovery with same hostname and IP. For step 2, is it a must to generate a self signed cert? is it possible to use back to original N1 CA- signed certificate? esolution Steps1. Obtain the N1 back...

Tai Eric · 10-08-2012

Hi All Cisco NAC Experts, I am currently experiencing a Cisco NAC NAC3315-SVR hang issue.The issue was already happened for few time on the same server and the symptom when NAC server hung includes no response to ICMP ping, no response to SSH reques...

Tai Eric · 12-15-2016

Hi Neno Spasov, Thanks for the information, it did help a lots. Regards, Eric Tai

Tai Eric · 06-20-2014

Hi Vattulu, The method of machine access restriction will be used, because there is no a plan to use anyconnect NAM on the client environment, since the prerequisite for EAP-chaining is to use anyconnect.Regards,Eric

Tai Eric · 09-06-2011

There are 3 type of mac learning methods for port security, you may use command show port-security address to view the aging timer status.1.securedynamic: dynamic learnt from switchport, it is influenced by aging timer.2.securesticky: dynamic learnt ...

Tai Eric · 09-06-2011

Hi Cashqoo,Thanks for the advise.I have found a workaround due to the port security mac address table aging doesn;t work on sticky mac address, but it is working on static mac address. I have added configuration as below and changed all the sticky le...

Tai Eric · 09-05-2011

Hi cadet, Thanks for the reply, i did try for these command, but I found that the mac address table on the switch port would never timeout even there is no traffic to the port.I found the weird behaiour is my laptop mac address was shown on switch ma...

Member Since	‎12-27-2010 08:54 AM
Date Last Visited	‎08-29-2018 12:01 AM
Posts	12

User Statistics

User Activity

ISE 2.1 limited support with WLC 4400 on AAA and Guest service

ISE - Inline Posture Node Deployment Issue - User can not access network after pass authentication checking

ISE machine authentication - only plug in to the network after booting

ISE - Loss of All Nodes in a Distributed Deployment, Recovery Using New IP Addresses and Hostnames

Cisco NAC server hang issue

Hi Neno Spasov,

Hi Vattulu, The method of

port security mac sticky with IP phone issue

port security mac sticky with IP phone issue

Re: port security mac sticky with IP phone issue