About Filip Po

Filip Po · 11-16-2022

Hello, I'm trying to install SMM (Calisti), and I end with this error. Can you help me?Cluster is built by RKE2 Rancher.smm-reader is not present in secrets: > kubectl -n smm-system get secretNAME TYPE DATA AGEprometheus-smm-prometheus Opaque 1 7h15m...

Filip Po · 02-24-2022

Hello,Please can someone tell why the hotspot portal (default, or by ISE Portal Builder) reloads the Success Page continuously? It's generating a lot of lines on ISE RADIUS LiveLog but does not work will properly on some Androids.Can I somewhere say ...

Filip Po · 02-04-2022

Hello, dear community, I am dealing with customer requests to ask only for e-mail without validation.I found manual as a solution: https://community.cisco.com/t5/network-access-control/input-email-only-without-validation-on-ise-2-3-self-registered/td...

Filip Po · 12-01-2021

Hello.Prime Infrastructure supports four types of system-defined port groups. As and when new devices are added to the system, the ports of the devices are automatically assigned to the respective groupsTrunk Ports—Ports that are connected to a Cisco...

Filip Po · 11-11-2021

Hello, dear community members.I am dealing with the new Root CA in the Enterprise Infrastructure.Both, old Root CA and new Root CA issue certificates to ISE EAP-TLS use.I can't use the new certificate for ISE EAP-TLS issued by the new Root CA because...

Filip Po · 11-17-2022

SOLVED by RTM: "The cluster must run a Kubernetes version that Istio supports. For Istio 1.13.x, these are Kubernetes 1.19, 1.20, 1.21 and 1.22."I had v.1.24.

Filip Po · 07-27-2022

Hello, because Apple decided not to support the wildcard certificate and let people choose to accept the warning, now it seems that apple took a step further and banned wildcard certificates completely. Are you sure there are no other problems with a...

Filip Po · 03-07-2022

Yes, I cleared cache, yes I opened TAC case. Yes, it's still doing even with default ISE hotspot portal. And yes, I have ACL applied with RFC1918 deny, and ISE TCP/8443 opened. Let's wait for TAC.

Filip Po · 02-04-2022

Hello, of course, if you do not want to restrict any of the protocols, then edit Default Network Access list to allow all checkboxes. This will turn off this requirement. If there is only one list, the choosing right one will be easy.

Filip Po · 08-23-2021

The workaround is: DO NOT use a priv-lvl=15 RADIUS cisco-av-pair argument and after successful Authorization, as a non-level-15 user do an enable to shift the privilege of the user. But I am hopefully waiting for the patch of ISE3.0.

Member Since	‎08-21-2004 12:27 PM
Date Last Visited	‎03-18-2023 05:23 AM
Posts	124
Total Helpful Votes Received	106

User Statistics

User Activity

installation of smm end with "could not find secret reference for sa"

ISE Hotspot Sucess Page reloads continuously

ISE Guest Self-registation portal only e-mail visible

Prime Infrastructure 3.8 Port Groups

ISE BYOD Profil on End Point how to add another Root CA certificate

Re: installation of smm end with "could not find secret reference

Re: PortalGuest - Problems with Androids and iPhones

Re: ISE Hotspot Sucess Page reloads continuously

Re: ISE: Select allowed protocols/servers sequence in policy set

Re: After upgrade to ISE2.7 old Catalysts stop RADIUS authZ priv-lvl=1