About Arne Bier

Arne Bier · 08-03-2024

Hello, I am using the ISE OpenAPI to renew guest portal certificates. /api/v1/certs/system-certificate/{hostName} Get all system certificates of a particular node The API works well. However, after importing the new cert and private key, the old cer...

Arne Bier · 07-27-2024

Hello, I have been spending hours trying to get SNMPv3 Informs working on any Cisco IOS or IOS-XE and it's just not working for me. The reason I want to use Informs and not traps, is that Informs are more reliable and will be queued and retried if th...

Arne Bier · 02-22-2024

Perhaps this will save anyone out there some frustration when using ISE 3.2 or later. The BU decided to rename a bunch of commands that were inherited from the classic Cisco IOS world, and which are deeply ingrained in our brains. It caught me out an...

Arne Bier · 02-11-2024

I was listening to the latest episode of Packet Pushers Heavy Networking talking about a customer’s experience with ditching their F5 in favour of the built in IOS-XE RADIUS load balancing feature. Is anyone else out there using this, and in particul...

Arne Bier · 01-30-2024

Hello, During the ISE integration with DNAC, ISE used its internal CA to generate a certificate for DNAC. I assumed that the default template called "pxGrid_Certificate_Template" would be used. This template creates certs with a validity period of 73...

Arne Bier · 08-09-2024

I have not touched ISE SMS for many years, but I remember struggling with this also. Have you seen this link? The examples in the link might help? Your provider appears to require a JSON payload - so, data content type should be set to JSON and the ...

Arne Bier · 08-09-2024

What is your use case for Passive ID? If you leave it enabled on the Node Deployment config page, but untick the feature on the Authorization Profile, AFAIK, ISE will retain the integration, but you won't be able to perform authorization on those end...

Arne Bier · 08-09-2024

I agree. I'm not sure what else you can check. I'd open a TAC case to be sure

Arne Bier · 08-08-2024

what do you mean by "extend scope" ?

Arne Bier · 08-08-2024

Ok - and since your attached screenshot was heavily redacted, I could not see which AD groups were used in each Sponsor Group - does each Sponsor Group have only one (or a unique set of) AD Groups listed there?

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎08-09-2024 01:40 PM
Posts	3,432
Total Helpful Votes Received	5520

User Statistics

User Activity

is there an ISE OpenAPI Filters Reference Guide

SNMP INFORM Requests not working with SNMP version 3

ISE 3.2 and CLI changes that cause confusion and annoyance

IOS RADIUS load balancing

ISE Internal CA pxGrid template with extended validity period

Re: SMS Gateway Integration with Text Anywhere

Re: Disabling Easy Connect in Cisco ISE but keep Passive Id integratio

Re: Sponsor user able to see all the other sponsor groups by default

Re: Cannot do Endpoint purge on ISE 3.1 P6

Re: Sponsor user able to see all the other sponsor groups by default