Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi, wondering if anyone can help.We have a Cisco ISE deployment. We need to use an external RADIUS server for 1 of our SSIDs. We want to control what VLAN that user is dropped into, however the external RADIUS is returning a VLAN ID. Normally I woul...
After some advice. The guides arent very clear when configuring Fortigate FGSP over FGCP and multipod.In ACI when you create a L4-L7 device. do you create 2 devices - 1 for each pod? or do you create a single device List all interfaces and create a s...
Hi, I'm having issues getting some IoT devices authenitcating with Cisco ISE. We are running ver 3.1.The supplier says his devices supportTLS_RSA_WITH_AES_256_CBC_SHA256TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256TLS...
Ye i think tunnel-private-group-id has a higher preference over an Aruba VSA. I had tried On Access-Accept, continue to Authorization Policy then created my own authorisation profile with the vlan we wanted to use however somehow this still didnt wor...
I'm no expert in ACI but we run multipod. We have 2 sites, 2 pods, 2 cores. The cores are connected together using an MPLS and BGP. We use OSPF between the cores and ACI to advertise the routes of the local cores into ACI. We advertise a 0.0.0.0/0 to...
found the answer - In the context of Cisco ACI with a multi-pod deployment and a service insertion for a Fortinet firewall cluster (using FGCP / FGSP), you typically configure one logical L4-L7 device in the ACI fabric (under Services > L4-L7 > Devic...
excellent article thanks for the info.I have a question. We are in the process of linking our Cisco ISE 3.1 (patch 5) with Intune/Azure AD. We are in a shared Tenancy so i have no access to Intune or Azure to configure what we need, but that is getti...
thanks - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 is enabled by default.In Cisco ISE Radius logs. is there a way to see what cipher was used? If the authentication fails, it says. but if it succeeds there's no mention of the cipher userd.Failed AuthSu...
