About ifabrizio

ifabrizio · 04-05-2024

Dear All,I am trying to configure an MAC ACL on a switch 4500(sup8) and apply it on a Portchannel that is connected to WLC.I have configured the MAC ACL:Extended MAC access list AIROSAPDENYdeny host 309c.245.67a4 anydeny any any (18 matches)and apply...

ifabrizio · 04-02-2024

Dear All,I have setup a CTS enviroment composed by two ISE 3.2 and some switches to test the trustsec, all works as expected.Now I' d like to extend in the production network, the CTS features, in the meantime I will order the Premier license for the...

ifabrizio · 03-06-2024

Dear All,I have configured a test switch port, with Dot1x and Mab as fallback authentication.I connected a new PC that is not know by the ISE, with no certificates, so the Dot1x do not works.I aspect that the MAB auth should not allow PC access to th...

ifabrizio · 03-05-2024

Dear All,I configured the port of the test switch to use Dot1x as the first authentication, and as a fallback in case the dot1x failed, to use the Mab type authentication.Everything seems to work correctly. But I have a question:If I connected a New ...

ifabrizio · 02-27-2024

I'm testing trustsec in a test environment.I connected a test PC, on a port of a 4500 Sup8 switch.Initially I excluded Dot1x(TEAP) type authentication and configured a static mapping on the port using the cts manual policy static sgt command.While an...

ifabrizio · 04-07-2024

I use a Cisco 9800, I am in the middle of WLC migration from older 5508.

ifabrizio · 04-05-2024

Hi MHM,I have tryed to apply the MAC ACL to the PortChannel and also on its ports members, but the ACL continue to do not filter the pc mac.Ok It seems a Portchannel limitation as you said. So How I can apply an ACL on a Portchannel? I need it to pre...

ifabrizio · 03-13-2024

Dear All,Finally I found the problem.In the ISE Default Authorization Policy was missing a Policy that deny to the Unknow devices to grant access to the Network.such as:Identity Group-Name Equals EnndPoint Identity Groups:Unknow Results = Deny Access...

ifabrizio · 03-06-2024

Hi MHM,I use internal database.The port is configured in this way:interface GigabitEthernet10/32description LABTESTswitchport access vlan 75switchport mode accessswitchport nonegotiateauthentication event server dead action authorizeauthentication ev...

ifabrizio · 03-05-2024

Follows the port switch config:switchport access vlan 71switchport mode accessswitchport nonegotiateauthentication event server dead action authorizeauthentication event server dead action authorize voiceauthentication event server alive action reini...

Member Since	‎06-14-2004 11:56 PM
Date Last Visited	‎04-12-2024 12:48 AM
Posts	176
Total Helpful Votes Received	17

User Statistics

User Activity

MAC ACL on PortChannel

Cisco ISE 3.2 Premier License in Evaluation Mode

Dot1x Client Authentication With Mab fallback method

Doubts about Dot1x with failover method MAB

Switch End User Interfaces CTS config with Dot1x Authentication

Re: MAC ACL on PortChannel

Re: MAC ACL on PortChannel

Re: Dot1x Client Authentication With Mab fallback method

Re: Dot1x Client Authentication With Mab fallback method

Re: Doubts about Dot1x with failover method MAB