About Arne Bier

Arne Bier · 10-29-2025

Hi, I am writing a jinja template to construct an IOS login banner. The banner has an outline using some character to make it look tidy. e.g. ++----------------------------------------------------------------------++ | ...

Arne Bier · 10-22-2025

Does anyone know what a valid use case is for unchecking this box? According to my experience, it tries to enforce RFC 5280. But in reality, unchecking this box can break 802.1X authentications. In particular, devices that are authenticating with 802...

Arne Bier · 07-30-2025

We provision all of our Catalysts with Cat Center and during provisioning, the devices receive the RADIUS/TACACS/NTP/SNMP etc that is configured in that part of the Network Design Hierarchy. Let's call this the 'base config'. But when I provision a C...

Arne Bier · 07-29-2025

I am unable to make ansible work with ISE 3.4 I have 3.4p2 running in the lab, and ansible core 2.18.7 (from a clean pipenv install ansible) When I run a playbook, I get this error An exception occurred during task execution. To see the full traceba...

Arne Bier · 07-22-2025

I launched a tacplus container and it's working great. The tac_plus.conf file contains the line accounting file = /var/log/tacplus-acct.log But since this is a container, we don't have access to the file system. Or is there a way to access the logs?

Arne Bier · 12-29-2025

Hi @adamscottmaster2013 Probably not the answer you want to hear, but ... I can't speak for Solarwinds because I have no experience with it. But I had done some of these things with PRTG. PRTG is designed for this. Just takes a little while to bend ...

Arne Bier · 12-10-2025

@Paul Dycus - TLS 1.3 for EAP-TLS was introduced in ISE 3.3 and 3.4 3.3 patch 2 - Release Notes for Cisco Identity Services Engine, Release 3.3 - Cisco

Arne Bier · 12-10-2025

If you're using IBNS 2.0, have you tried doing concurrent MAB/802.1X to see if that works any better? I am surprised that doing MAB first, didn't fix the issue - in theory that is what should have triggered the MAB auth in ISE on the first non-EAPOL ...

Arne Bier · 12-09-2025

What is the size of the VM disk that you tried upgrading? I have run into issues with 300GB VM disks and the safe bet is to use 600GB minimum. You might have better luck by building a new ISE 3.3 or 3.4 VM, patching it, and then restoring the ISE 3....

Arne Bier · 12-07-2025

It definitely good to always tick that box when importing the cert. There is another check you can perform for the ISE server certificates - however, be careful when disabling this checkbox (RFC 5280 strict compliance) , because it can prevent some v...

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎12-30-2025 02:26 AM
Posts	4,082
Total Helpful Votes Received	5924

User Statistics

User Activity

Catalyst Center jinja template - text padding question

ISE Accept certificates without validating purpose will break 802.1AR

Catalyst Center provisioning routers and base config

Ansible ISE collection for ISE version 3.4 supported?

CML 2.9 tacplus container - are the TACACS logs viewable?

Re: How to monitor Cisco ISE 3.3 patch-7 cluster via SolarWinds SNMP

Re: Cisco ISE 3.5 release announcement

Re: IP phone endpoint not getting a DHCP offer on a closed port

Re: ISE 3.2 on VMWare - becomes a brick after trying to upgrade to 3.3

Re: ISE and Certificate Extensions; Considerations and Best Practices