About Arne Bier

Arne Bier · 03-20-2023

Hello, who maintains vios_l2-ADVENTERPRISEK9-M that comes with the CML image ? switch1#show ver Cisco IOS Software, vios_l2 Software (vios_l2-ADVENTERPRISEK9-M), Experimental Version 15.2(20200924:215240) [sweickge-sep24-2020-l2iol-release 135] Copyr...

Arne Bier · 03-14-2023

I had an unfortunate experience today after a few hundred wired MAB devices stopped working - the reason was that the vendor's MAC OUI Identifier changed (due to an ISE Profiler Feed update). The reason for the MAC OUI update in ISE, was that the ve...

Arne Bier · 12-04-2022

Hello, I am planning a load balancer migration, and all the existing load balanced sessions will be lost after the cutover. This also means that after the cutover, the load balancing of RADIUS sessions will very likely not hit the same PSN's as befor...

Arne Bier · 11-28-2022

Hello, When ISE 3.1 was first released I tested ZTP on vSphere using the .iso ISE installer method. At that time, I was unable to mount two .iso/.img files, so I used the Advanced Attributes option (BASE64 encoded) ZTP config config option - that wor...

Arne Bier · 11-13-2022

Hello, Does anyone know the exact communication flow in when ISE sends a CoA due to an endpoint profiler change? Does the PSN that owns the endpoint send a CoA (UDP/1700) or is the PAN/MNT always involved? I have a fully distributed ISE 3.0 deploymen...

Arne Bier · 06-04-2023

Yeah sorry - that was the wrong question to ask. ISE doesn't get involved with the password complexity checking. I guess we should ensure that the following checkbox is enabled: And as for the password complexity, it seems that AD enforces that. I...

Arne Bier · 06-04-2023

A vey basic solution that works for one of my customers for remote PC imaging, is to give the Desktop Team access to ISE (limited Menu to see Endpoints only) and they add MAC addresses to a PXEBoot Group. Those endpoints get a Permit Any Any dACL on ...

Arne Bier · 06-04-2023

Have you checked the ISE Admin Password Policy settings? Administration > System > Admin Access > Authentication > Password Policy

Arne Bier · 06-02-2023

Oh dear that is not good feedback. Did the URT eventually run clean? See, this is why I plan to build 3.2 from scratch. No upgrade. I still don’t trust them. I have had 3.2 running in lab which was built from scratch and no issues.

Arne Bier · 05-30-2023

TACACS+ command authorization is good fun. The way to think about the config in the AAA server is this: The entire command and its arguments are sent to the AAA server when the user presses Enter. You process each line as it comes in. But there are ...

Member Since	‎02-23-2017 06:57 PM
Date Last Visited	‎06-07-2023 12:03 AM
Posts	2,742
Total Helpful Votes Received	5096

User Statistics

User Activity

No update to vIOS L2 image since Sept 2020

Profiling Policy based on MACOUI Name or MAC Address Hex Prefix ?

ISE Load Balancing Cutover Impact to existing RADIUS sessions

ISE 3.1 Zero Touch Provisioning (ZTP) issues

CoA after profiling fails for one PSN - but manual CoA works

Re: Changing password of TACACS AD user in the switch CLI

Re: Authenticate Windows Local Admin Account

Re: Changing password of TACACS AD user in the switch CLI

Re: Stability of ISE version 3.2?

Re: Cisco ISE 3.1 command set issues NEED HELP!!