About nikhilcherian

nikhilcherian · ‎08-13-2018

In my setup, I have ASA Version 9.6(4)8 & ISE 2.2 patch 8. When I try for VPN posturing, I see the below Client connect to the VPN Client goes thru the Auth ( i have created internal users for VPN) Client is moved to posture unknown state ISE pushes the ISEPostureCFG.xml to the client. I have given any AV install check & any AV update check If my AV is not updated, I get the warning If there is no compliance module in the laptop, ISE pushes the posture module My windows client validates the posture conditions. anyconnect shows posture compliant However in ISE client is still stuck in the posture-compliant state & client keeps redirecting to the ISE if open a browser I am using anyconnect-4.5.04029 I have enabled dynamic authorization in the ASA & I can see "coa-push=true" in the Cisco AV pair in ISE In the ASA, client is still seen with the REDIRECT ACL How can I troubleshoot the issue Thanks Nikhil

nikhilcherian · ‎07-14-2018

Thank you Scott for the reply. I already tried with the bundle & got an error saying unable to extract the tar bundle Regards Nikhil

nikhilcherian · ‎07-14-2018

Hi All, Has anyone tried to upload the custom webauth bundle in the cisco 1815 access points. Can I use the same webauth bundle for WLC Regards Nikhil

nikhilcherian · ‎05-08-2018

Dear All, I am using anyconnect NAM for windows authentication to the network & I have configured the NAM to authenticate the user before login. I am using anyconnect version 4.5.02036. When the windows password expires for the windows PC, the anyconnect is prompting for the password change. I have attached a screenshot of the password change screen, Is this an expected behavior Regards Nikhi

nikhilcherian · ‎04-20-2018

Hi Leo, But the doc says, doesn't this mean the AP can provide signal from single port The Aironet 1562E access points are equipped with four separate N-type female connectors that carry dual-band signals or, through software control, can be configured such that the bottom pair of connectors carry only 2.4-GHz signals and the top pair carry only 5-GHz signals. This gives users multiple configuration options, as shown in Figure 1 . Regards Nikhil

nikhilcherian · ‎04-20-2018

Hi All, I would like to know how to connect antenna in Cisco AP1562E. I have only two antenna, if I connect the antenna one on slot 1 & next on slot 3, will this work . I am not looking for beamforming, I just want wireless coverage Regards Nikhil

nikhilcherian · ‎04-11-2018

Dear All, In my customer network, I have multiple locations added to Cisco Prime. These locations are independent & each location have core/distribution/access architecture. In some locations I have Cisco 4500 series switches as distribution & some location have Cisco nexus 9k acting as distribution. I am using PI 3.3 with patch1. My issue is that with Cisco 4500 series, the Prime is building Topology diagram, but with Nexus 9k the topology diagrams doesn't show any links . I can see cdp neighbors from the Nexus in the Prime Is there anything I can try on this setup. Regards Nikhil

nikhilcherian · ‎03-30-2018

My issue is like this, I have already mounted the access point in a remote location. Now I don't have the console access to the AP. How can I convert the AP to the capwap As per my understanding when mobility express AP come up, the AP will look for a master controller, if master controller is not available, the AP will go into the initial configuration for the controller. Is there any way I can telnet/ssh to the AP at this moment. or if connect to the SSID CiscoAirProvison is there any way I can convert to capwap Regards Nikhil

nikhilcherian · ‎03-29-2018

What does the below command do config ap unifiedmode <switch_name> <switch_ip_address> If I execute this command from the an mobility express AP, does it convert the current AP also to capwap Regards Nikhil

nikhilcherian · ‎03-18-2018

Hi All, Does anyone what is the impact of the bug, the bug is filed as a enhancement Regards Nikhil

nikhilcherian · ‎03-01-2018

Dear Experts, I have customer using intel i217-lm ethernet card.I am using anyconnect to do posture validation in the PC, When I connect the device to the network, I see the below things happen Client PC authentication happen successfully Posture validation happen successfuly Once the posture is validated, ISE sends compliant status to the client Switch port is authorized However when it comes to the client, compliance check gets stuck at 95% The client is not able to change the get into the compliant status. Have anyone observe this issue Regards Nikhil

nikhilcherian · ‎01-18-2018

Thank your for the reply I already tried this when my client is in posture non-client state, I can see the ISE is pushing the ACL details correctly but the WLC is not updating the client status accordingly Regards Nikhil

nikhilcherian · ‎01-17-2018

I would like send an ACL from ISE to the cisco 5760 controller, What is the parameter to be set to send AAA override ACL to the 5760 controller from ISE. Thanks Nikhil

nikhilcherian · ‎12-19-2017

Just in case this is helpful to anyone, I am adding something I found 1. In my setup, I got the message "Bypassing AnyConnect scan—Your network is configured to use the Cisco NAC agent." because the client wasn't hitting the CP rules 2. I added one more rule specific to the Wireless controller in the CP, saying if the "RADIUS called station id end with XYZ", this is the use the CP profile, Thanks to my friend who pointed out this to me 3. With this also, I didn't find my client downloading the Posture rule. 4. I had to edit the posture rules & add a specific rule to the Posture condition, saying if the "RADIUS called station id end with XYZ" use this Posture condition. This helped me to resolve the issues

nikhilcherian · ‎12-03-2017

Is there any work around for this issue

Date Registered	‎12-22-2008 06:40 AM
Date Last Visited	‎08-15-2018 02:19 AM
Total Messages Posted	432
Total Helpful Votes Received	113

anyconnect vpn client showing compliant...

Re: Mobility Express on 1815 custom web...

Mobility Express on 1815 custom webauth...

anyconnect nam password expiry prompt

Re: AP1562E antenna connectivity

AP1562E antenna connectivity

Network topology with Nexus

Re: mobilty express to capwap

mobilty express to capwap

CSCuw29304 - Cat3850 IFM-3-LE_ERROR/IFM...

Intel intel i217-lm with anyconnect

Re: AAA overide acl 5760

AAA overide acl 5760

Re: When the client is in Posture

CSCvg74398 - redirection to guest porta...