About achim2

achim2 · 11-07-2024

Hi all, I want to share my findings about IBNS 2.0 with interface templates and the idea to use this feature to have the same default interface config on all switchports in the network (except several uplinks for sure). Main goal is: To allow not onl...

achim2 · 02-06-2023

Hi all, I summarize quickly what we tried to do before writing this enhancement request: The switch should have a default port config for all access ports, allowing mab and dot1x. ISE should answer with a template name in the result, bringing the por...

achim2 · 11-28-2016

Hi Team,a customer wants to use ISE guest portal with user/password authentication via an external Radius server. I have defined an external Radius server and a Radius Server Sequence containing this server, but I cannot choose this sequence as authe...

achim2 · 11-11-2016

An airport plans to use ISE Hotspot Guest Portal for the passengers. To avoid, that the wifi bocomes overcrowded by thousands of airport employees, they want to define some rules like:- If an endpoint has been online >12 hours during the last 7 days,...

achim2 · 08-18-2025

I have not played around much with this new command. For flexconnect APs, it should work great, since no EAPOL comes from the wireless clients to the switchport. Here, the "peer" command avoids, that authenticated wireless clients are authenticated a...

achim2 · 08-17-2025

@Arne Bier @wkoschmeder @PSM In case you missed it: 17.7.1 introduced the attribute "peer" for the command "access-session host-mode multi-host" which only authenticates the directly connected neighbor device (e.g. the access point). Here is the link...

achim2 · 02-03-2025

You are right: We don't use the supplicant config generally for all switches, but only for those who don't have physically secured uplinks, e.g. compact switches placed in an office as port extension. The goal is here, to not have unsecured trunk por...

achim2 · 01-31-2025

Hi @Arne Bier, here are some thoughts regarding your concerns: write mem doesn't affect dynamic interface templates, since they are only applied to the session, not written to the running-configSwitch reboot is no problem. After the reboot, the authe...

achim2 · 01-31-2025

Hi @Philipp Staiger, sorry for the delay. I planned to not only post the configs, but also describe the whole process with authentication results. But this is a little bit too time consuming. That's why I send the configs first and look forward to re...

Member Since	‎07-26-2011 06:11 AM
Date Last Visited	‎12-17-2025 02:24 PM
Posts	17
Total Helpful Votes Received	10

User Statistics

User Activity

Using IBNS 2.0 and interface templates for a default switchport config

CSCwe28078 - Enhancement request to support MAB/dot1x on trunk ports

Guest Portal Authentication via External Radius Server?

Can I assign a time contingent to Hotspot Guest Portal users?

Re: Using IBNS 2.0 and interface templates for a default switchport co

Re: Using IBNS 2.0 and interface templates for a default switchport co

Re: Using IBNS 2.0 and interface templates for a default switchport co

Re: Using IBNS 2.0 and interface templates for a default switchport co

Re: Using IBNS 2.0 and interface templates for a default switchport co