Hello all! I am familiar with vPC and VRRP/HSRP operation but I have a situation I haven't faced before and I need some advice:Client has two MDF's connected via high-speed fiber (50Gbs). A legacy L3 switch in MDF1 is the core router for all VLANs to...
Hello, Community! Back in the early days of Nexus 5k and vPC, we had to create a custom network-qos policy to enable jumbo frame support. Times change (often for the better) and the Nx93180 has the system jumbomtu set to 9216 by default, and the vPC ...
All, I have a distributed ISE deployment (3 PSNs) and three WLC's. The ISE is recording the following errors on all three WLC's "11215 No response has been received from Dynamic Authorization Client in ISE ". The RADIUS configuration on all WLC's inc...
All, I have a customer with a fully operational 802.1x network using ACS as the AAA. We are converting to ISE2.1 and they wish to also implement TrustSEC. Each closet has one or two Catalyst 4506 switches with Sup8-E, and all support in-line tagging....
Remote users using Cisco VPN 4.2 connect successfully to a Cisco Pix 515 (ver. 6.3). The client is configured to allow Transparent Tunneling and Local Lan access, but once connected to the Pix, these two options are disabled. What configuration chang...
Reza Sharifi
Thank you very much... I applied the suggested policy (which is essentially what we would do on a Nx5k) and I'm seeing the expected results.
Many thanks to all who responded!
Mike
Neno,
From the bottom up:
No flex-connectPatches 1 and 2 (just upgraded from 1.4 this past weekend)Advanced settings include "Override AAA", "RADIUS NAC" and "DHCP Profiling Enabled", plus all of the other default settingsUpon further investigation,...
Aaron,Well, you are officially my TrustSEC Hero! Many thanks, especially regarding the MACsec portion (which we are not planning on implementing, thus saving me from the extra configuration). In one sense, the documentation seemed to reference the CT...
Aaron,Thank you for your response... since you specifically mention scheduling new maintenance windows, I guess I am correct in that to configure in-line propagation between the edge switches and the 6509, I will have to configure "cts manual", which...
