About benbroadfoot

benbroadfoot · 12-17-2023

Has anyone experienced high output drops on IE-4010 interfaces connected to VMware Hosts & also the uplink to the core switches from the IE-4010? Lots of chatter about buffer issues but need to narrow this down. We have some of our VM Hosts connected...

benbroadfoot · 02-01-2023

Hi There,I have 2 C9500 L3 switches setup successfully authenticating to 2 ISE 2.6.0.156 servers using the following command set:aaa group server tacacs+ ISE_SERVERSserver-private 10.x.x.1 key 7 blablablaserver-private 10.x.x.2 key 7 blablablaip taca...

benbroadfoot · 01-30-2023

Hi there,I am attempting to do a trace route from a switch to an interface I have on a my ISE server however it is getting blocked. Does ISE (v2.6.0.156) have some sort of firewall that could be blocking the trace attempt? Thanks!

benbroadfoot · 02-19-2023

Hi All,Not sure why I haven't done this previously but I have just enabled the tacacs debugging. See results below when I try to logon with tacacs enabled in the switch config.009236: Apr 16 15:30:17.538 UTC: TPLUS: Queuing AAA Authentication request...

benbroadfoot · 02-15-2023

aaa authentication login default group tacacs+ localaaa authentication enable default group tacacs+ enableaaa authorization exec default group tacacs+ localtacacs server ISE_SERVERaddress ipv4 10.x.x.1key 7 blablabla

benbroadfoot · 02-15-2023

Hi @balaji.bandi, the 'private-server' commands are working on any of the L2 switches, no matter which model it is (IE5K & 4010). On the IE5K's that have routing enabled it doesn't work & I have to use the 'tacacs server' commands which do work.

benbroadfoot · 02-14-2023

just using "server 10.x.x.1" does not accept the 'key' command which is required.The Vlanxxx is global yes

benbroadfoot · 02-14-2023

Hi @MHM Cisco World - no problems mate, any help from you guys is greatly appreciated!1 - No VRF's are used2- C9500-48Y4C running Cisco IOS XE Software, Version 16.12.05b (working with aaa group server tacacs+ ISE_SERVERS ISE config)IE-5000-12S12P-10...

Member Since	‎09-15-2022 09:34 PM
Date Last Visited	‎01-31-2024 12:13 AM
Posts	17
Total Helpful Votes Received	20

User Statistics

User Activity

IE-4010 output drops with VMware Hosts connected

Tacacs+ 'aaa group server' vs 'tacacs server' commands

trace route to ISE interface

Re: Tacacs+ 'aaa group server' vs 'tacacs server' commands

Re: Tacacs+ 'aaa group server' vs 'tacacs server' commands

Re: Tacacs+ 'aaa group server' vs 'tacacs server' commands

Re: Tacacs+ 'aaa group server' vs 'tacacs server' commands

Re: Tacacs+ 'aaa group server' vs 'tacacs server' commands