Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Filip Po
Stats
Member since
08-21-2004
81
Posts
46
Helpful
6
Solutions
Certifications
Created by
Filip Po
in Unified Computing System Discussions
in Unified Computing System Discussions
12-19-2019
07:45 AM
12-19-2019
07:45 AM
Hello, during the installation of the Hyperflex cluster I had created iSCSI interfaces for this kind of traffic. But I am dealing with these errors now. host-eth-10 and vif-1298 are tides to the iSCSI interface. How can I shut down or disable this prepared interfaces to avoid Major alarms? Or even delete it? Affected object : sys/rack-unit-1/adaptor-1/host-eth-10 Description : Adapter ether host interface 1/1/10 link state: down Affected object : sys/rack-unit-1/adaptor-1/host-eth-10/vif-1298 Description : Virtual interface 1298 link state is down These errors arise after I had added a disjoint layer 2 configuration.
... View more
Labels:
Created by
Filip Po
in Cisco Bug Discussions
in Cisco Bug Discussions
09-20-2019
01:39 AM
09-20-2019
01:39 AM
I hit the same issue on 4.0(4d).
... View more
Labels:
08-07-2019
04:18 AM
I used FlexConfig with Flex Object: dhcprelay server <dhcp_server_IP> <server_interface_name> dhcprelay setroute <relay_interface_name> dhcprelay enable <relay_interface_name> FDM will not let you have any dhcp server (DHCPD) running on vFTD image. Erase all DHCP server (DHCPD) configuration befor apply dhcprelay to FlexConfig. Filip
... View more
Created by
Filip Po
in Network Access Control
in Network Access Control
07-19-2019
07:08 AM
07-19-2019
07:08 AM
Unfortunately, I created a really new Rule (ASA FW Rule NEW) from scratch with the same values as the old one. But the result is the same. All Device Types is system Network Device Group and it can't be changed. @@@ PsUpgrade: debug- :Trying to rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:Device Type#All Device Types#ASA FW
@@@ PsUpgrade: info- :Successfully rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:All Device Types#ASA FW
@@@ PsUpgrade: debug- :Reading Authentication rules for Policy Set ASA FW Rule NEW
@@@ PsUpgrade: debug- :Reading Default Authentication rule for Policy Set ASA FW Rule NEW
@@@ PsUpgrade: debug- :Build authentication result data for default rule of Policy Set ASA FW Rule NEW
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, isArrivingFromPolicySetAPI= true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, PolicySetRestService.isPolicySetModeActivated() = true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
@@@ PsUpgrade: debug- :Built authentication result for rule Default with following attributes: Identity Source=All_User_ID_Stores, If Auth fail=REJECT, If Process fail=DROP, If User not found=REJECT
@@@ PsUpgrade: debug- :Found 1 non default Authentication rules for Policy Set ASA FW Rule NEW
@@@ PsUpgrade: debug- :Reading Authentication rule ASA VPN AuthC of Policy Set ASA FW Rule NEW
@@@ PsUpgrade: warn- :Couldn't buildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:null:Device Type#All Device Types#ASA FW, Will try to build it from rhs value
com.cisco.cpm.policy.pal.PalException: Value for attribute is not a permitted option
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.validateAllowedValues(ConditionsData.java:545)
at
... View more
Created by
Filip Po
in Network Access Control
in Network Access Control
07-19-2019
05:03 AM
07-19-2019
05:03 AM
Hello, URT test fails on ISE 2.2 Patch 14. Can anybody read the log and tell me, what is wrong in the First Rule of Policy Set? Running data upgrade on cloned database - Data upgrade step 1/43, UPSUpgradeHandler(2.3.0.100)... Failed. - Failed Condition: @@@ PsUpgrade: debug- : Found allow value for Network Access:Protocol0:RADIUS
@@@ PsUpgrade: warn- :Couldn't buildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:null:Device Type#All Device Types#ASA FW, Will try to build it from rhs value
com.cisco.cpm.policy.pal.PalException: Value for attribute is not a permitted option
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.validateAllowedValues(ConditionsData.java:545)
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.initSimple(ConditionsData.java:438)
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.<init>(ConditionsData.java:299)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgradeUtil.buildConditionDataForNameValue(PolicyUpgradeUtil.java:947)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildConditionDataClauseSimple(UpgradeNetAccessRuleBuilder.java:152)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildConditionDataClauses(UpgradeNetAccessRuleBuilder.java:99)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildRuleConditionData(UpgradeNetAccessRuleBuilder.java:70)
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildNetAccessRuleConditionData(AbstractUpgradePolicyDataBuilder.java:78)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradePolicyDataBuilderRadius.buildNetAccessRuleConditionData(UpgradePolicyDataBuilderRadius.java:200)
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildPSLevelConditionsData(AbstractUpgradePolicyDataBuilder.java:64)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradePolicyDataBuilderRadius.buildUpgradeData(UpgradePolicyDataBuilderRadius.java:76)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySetRadius(PolicyUpgrade.java:394)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySet(PolicyUpgrade.java:337)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySets(PolicyUpgrade.java:213)
at com.cisco.cpm.ups.upgrade.impl.PolicyUpgradeHandler.importData(PolicyUpgradeHandler.java:67)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.exportAndImport(UpgradeHandler.java:38)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.execUpgrade(UpgradeHandler.java:29)
at com.cisco.cpm.ups.upgrade.impl.UPSUpgradeHandler.upgrade(UPSUpgradeHandler.java:154)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.UpgradeServices(UpgradeServiceRegistrar.java:132)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.main(UpgradeServiceRegistrar.java:185)
@@@ PsUpgrade: debug- :Trying to rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:Device Type#All Device Types#ASA FW
@@@ PsUpgrade: info- :Successfully rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:All Device Types#ASA FW
@@@ PsUpgrade: debug- :Reading Authentication rules for Policy Set ASA FW Rule
@@@ PsUpgrade: debug- :Reading Default Authentication rule for Policy Set ASA FW Rule
@@@ PsUpgrade: debug- :Build authentication result data for default rule of Policy Set ASA FW Rule
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, isArrivingFromPolicySetAPI= true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, PolicySetRestService.isPolicySetModeActivated() = true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
@@@ PsUpgrade: debug- :Built authentication result for rule Default with following attributes: Identity Source=Internal Users, If Auth fail=REJECT, If Process fail=DROP, If User not found=REJECT
@@@ PsUpgrade: debug- :Found 1 non default Authentication rules for Policy Set ASA FW Rule
@@@ PsUpgrade: debug- :Reading Authentication rule ASA VPN AuthC of Policy Set ASA FW Rule
@@@ PsUpgrade: debug- :About to get condition RHS display value for Network Access with attribute Protocol
@@@ PsUpgrade: debug- :Network Access:Protocol has allow values enumeration
@@@ PsUpgrade: debug- : Found allow value for Network Access:Protocol0:RADIUS
@@@ PsUpgrade: warn- :Couldn't buildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:null:Device Type#All Device Types#ASA FW, Will try to build it from rhs value
com.cisco.cpm.policy.pal.PalException: Value for attribute is not a permitted option
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.validateAllowedValues(ConditionsData.java:545)
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.initSimple(ConditionsData.java:438)
at com.cisco.cpm.policy.pal.policyCondition.ConditionsData.<init>(ConditionsData.java:299)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgradeUtil.buildConditionDataForNameValue(PolicyUpgradeUtil.java:947)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildConditionDataClauseSimple(UpgradeNetAccessRuleBuilder.java:152)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildConditionDataClauses(UpgradeNetAccessRuleBuilder.java:99)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradeNetAccessRuleBuilder.buildRuleConditionData(UpgradeNetAccessRuleBuilder.java:70)
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildNetAccessRuleConditionData(AbstractUpgradePolicyDataBuilder.java:78)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradePolicyDataBuilderRadius.buildNetAccessRuleConditionData(UpgradePolicyDataBuilderRadius.java:200)
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildAuthenticationRules(AbstractUpgradePolicyDataBuilder.java:128)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradePolicyDataBuilderRadius.buildUpgradeData(UpgradePolicyDataBuilderRadius.java:96)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySetRadius(PolicyUpgrade.java:394)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySet(PolicyUpgrade.java:337)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySets(PolicyUpgrade.java:213)
at com.cisco.cpm.ups.upgrade.impl.PolicyUpgradeHandler.importData(PolicyUpgradeHandler.java:67)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.exportAndImport(UpgradeHandler.java:38)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.execUpgrade(UpgradeHandler.java:29)
at com.cisco.cpm.ups.upgrade.impl.UPSUpgradeHandler.upgrade(UPSUpgradeHandler.java:154)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.UpgradeServices(UpgradeServiceRegistrar.java:132)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.main(UpgradeServiceRegistrar.java:185)
@@@ PsUpgrade: debug- :Trying to rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:Device Type#All Device Types#ASA FW
@@@ PsUpgrade: info- :Successfully rebuildConditionDataForNameValue for: lhsAttrId:DEVICE.Device Type rhsString:All Device Types#ASA FW
@@@ PsUpgrade: debug- :Build authentication result data for rule ASA VPN AuthC in Policy Set ASA FW Rule
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, isArrivingFromPolicySetAPI= true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, PolicySetRestService.isPolicySetModeActivated() = true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
@@@ PsUpgrade: debug- :Build authentication rule result data for outer rule ASA VPN AuthC
@@@ PsUpgrade: debug- :Reading authentication inner rules for PS: ASA FW Rule
@@@ PsUpgrade: debug- :Build authentication rule result data for outer default rule
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, isArrivingFromPolicySetAPI= true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
-->validatePolicyMode, PolicySetRestService.isPolicySetModeActivated() = true
isPolicySetModeActivated --> pss.getPolicySetMode() = POLICY_SET
Retrived the data from Handlercom.cisco.cpm.ups.upgrade.impl.PolicyUpgradeHandler]
com.cisco.cpm.infrastructure.upgrade.api.UpgradeFailureException: java.lang.NullPointerException
at com.cisco.cpm.ups.upgrade.UpgradeHandler.exportAndImport(UpgradeHandler.java:41)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.execUpgrade(UpgradeHandler.java:29)
at com.cisco.cpm.ups.upgrade.impl.UPSUpgradeHandler.upgrade(UPSUpgradeHandler.java:154)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.UpgradeServices(UpgradeServiceRegistrar.java:132)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.main(UpgradeServiceRegistrar.java:185)
Caused by: java.lang.NullPointerException
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildAuthenticationRuleResultDataForOuterDefaultRule(AbstractUpgradePolicyDataBuilder.java:284)
at com.cisco.cpm.policy.configuration.upgrade.builder.AbstractUpgradePolicyDataBuilder.buildAuthenticationInnerRules(AbstractUpgradePolicyDataBuilder.java:182)
at com.cisco.cpm.policy.configuration.upgrade.builder.UpgradePolicyDataBuilderRadius.buildUpgradeData(UpgradePolicyDataBuilderRadius.java:99)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySetRadius(PolicyUpgrade.java:394)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySet(PolicyUpgrade.java:337)
at com.cisco.cpm.policy.configuration.upgrade.PolicyUpgrade.upgradeLegacySets(PolicyUpgrade.java:213)
at com.cisco.cpm.ups.upgrade.impl.PolicyUpgradeHandler.importData(PolicyUpgradeHandler.java:67)
at com.cisco.cpm.ups.upgrade.UpgradeHandler.exportAndImport(UpgradeHandler.java:38)
... 4 more
Error while applying changes in version: 2.3.0.100 class: com.cisco.cpm.ups.upgrade.impl.UPSUpgradeHandler
com.cisco.cpm.infrastructure.upgrade.api.UpgradeFailureException: Failed to upgrade to version 2.3.0.100: java.lang.NullPointerException
at com.cisco.cpm.ups.upgrade.impl.UPSUpgradeHandler.upgrade(UPSUpgradeHandler.java:162)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.UpgradeServices(UpgradeServiceRegistrar.java:132)
at com.cisco.cpm.infrastructure.upgrade.impl.UpgradeServiceRegistrar.main(UpgradeServiceRegistrar.java:185)
ERROR! isedataupgrade.sh FAILED. ISE GLOBAL DATA UPGRADE FAILED
... View more
Labels:
Created by
Filip Po
in Wireless and Mobility
in Wireless and Mobility
06-30-2019
11:18 PM
06-30-2019
11:18 PM
I am using AireOS 8.5. Model: AIR-AP1832I-E-K9 Software Version: 8.5.140.0
... View more
06-30-2019
11:15 PM
I am curious how you can accept a solution with that CDP error and live with that. Let me do some add-ons: You can set switchport nonegotiation to disable DTP. I am missing this DTP disable command on the C9300. And the Cat3850 IS NOT dummy switch so it has to be configured also. It talks by STP, DTP, CDP, VTP! So I recommend configuring C3850 by: int gig x/y switchport mode access switchport nonegotiate ! vtp mode off (or transparent) spanning-tree vlan 1 - 4094 priority 64000 Or you can turn off CDP at particular ports on C3850 for a shortcut to eliminating logging notification.
... View more
Created by
Filip Po
in Wireless and Mobility
in Wireless and Mobility
06-28-2019
01:57 PM
06-28-2019
01:57 PM
You use AP1830 in Mobility Express mode. ME means one of the AP doing Wireless Controller. You have several possibilities: a) more complicated = use RADIUS server or ISE-PIC for whitelisting devices. b) simple = in menu: Wireless Settings > WLAN Users, under tab Local MAC Addresses define your whitelisted devices. You can also use function to import or export whitelisted MAC addreses. See the attached picture. +++ mark helpful, or a solution when satisfied +++
... View more
06-28-2019
01:48 PM
Native VLAN is that one, which transmitted packets have not been encapsulated by switch with 802.1Q header on trunk ports. You have connected two switches with trunk port. Default native VLAN is 1, but it is recommended to change it to another VLAN and do not use VLAN 1. You can change native VLAN by this command on both ends of trunk same VLAN number: configure terminal interface GigabitEthernet x/y/z switchport trunk native vlan <vlan_number> Of course, every time VLAN has to exist on both ends of trunk. configure terminal vlan <vlan_number> name <vlan_name>
... View more
06-28-2019
06:42 AM
Thank you, now I see. Total output drops show that there will be a problem with buffers. More queue you create, less buffer memory is left per queue. Here is a document, which will lead you to the solution. Georg Pauwen did good advice. Tweak the output buffer.
... View more
06-28-2019
04:34 AM
Hello. If interfaces are no more than 20 % utilized than no QoS drops should be on the line. Post show interface command for a particular interface with drops. Post show policy-map <policy-name> for a particular policy map applied on that interface. Post show policy-map interface <interface> for the same interface with drops.
... View more
Created by
Filip Po
in Network Access Control
in Network Access Control
05-21-2019
10:36 PM
05-21-2019
10:36 PM
It's is bug CSCvf33851. The affected release is also ISE 2.2.0.470. The workaround is working as well in this case. Problem solved. ISE Admin User with limited access can now delete EndPoint from a table in Content visibility > Endpoints menu.
... View more
Created by
Filip Po
in Cisco Bug Discussions
in Cisco Bug Discussions
05-21-2019
10:25 PM
05-21-2019
10:25 PM
I found bug in affected release 2.2.0.470. The workaround is also working in this case.
... View more
Labels:
Created by
Filip Po
in Network Access Control
in Network Access Control
05-21-2019
04:05 AM
05-21-2019
04:05 AM
ISE 2.2 Patch 13 and Endpoint delete issue. Hello, I did setup RBAC policy Menu + Data for Admin User with limited permissions. When this Limited Admin logins and try delete endpoint under the menu: Content visibility > Endpoints it got an error message: " There was an error while deleting all the records. See logs for more details" Limited Admin has Full Data Access to Endpoints Identity Group. When Super Admin tries to delete endpoint it succeeds. What should be a problem with RBAC settings? Where are the logs for more details? I did not find any logs under Reports menu. Thank you.
... View more
Labels:
05-07-2019
12:29 PM
It should be nice to have DNA Center Lab with ISE to fully build and see SD-Access from scratch. Include AD, DNS service. There is no possibility to build a demo SDA fabric with DNA-C for learning purpose in a lab environment.
... View more
See more ideas labeled with:
12-19-2019
Hello, during the installation of the Hyperflex cluster I had created
iSCSI interfaces for this kind...
08-07-2019
I used FlexConfig with Flex Object:dhcprelay server
dhcprelay setroute
dhcprelay enable FDM will
n...
Created by
Filip Po
in Network Access Control
07-19-2019
07-19-2019
Unfortunately, I created a really new Rule (ASA FW Rule NEW) from
scratch with the same values as th...
Created by
Filip Po
in Network Access Control
07-19-2019
07-19-2019
Hello,URT test fails on ISE 2.2 Patch 14.Can anybody read the log and
tell me, what is wrong in the ...
Created by
Filip Po
in Wireless and Mobility
06-30-2019
06-30-2019
I am using AireOS 8.5. Model: AIR-AP1832I-E-K9Software Version:
8.5.140.0
06-30-2019
I am curious how you can accept a solution with that CDP error and live
with that.Let me do some add...
Created by
Filip Po
in Wireless and Mobility
06-28-2019
06-28-2019
You use AP1830 in Mobility Express mode. ME means one of the AP doing
Wireless Controller.You have s...
06-28-2019
Native VLAN is that one, which transmitted packets have not been
encapsulated by switch with 802.1Q ...
05-21-2019
It's is bug CSCvf33851. The affected release is also ISE 2.2.0.470.The
workaround is working as well...
05-21-2019
ISE 2.2 Patch 13 and Endpoint delete issue. Hello,I did setup RBAC
policy Menu + Data for Admin User...
Public Statistics
| Date Registered | 08-21-2004 12:27 PM |
| Date Last Visited | 03-16-2020 12:37 AM |
| Total Messages Posted | 81 |
| Total Helpful Votes Received | 46 |
Helpful Votes Given To
.jpg "Hall of Fame Cisco Employee"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 5 | |
| 5 |
.jpg "VIP Expert"){kind=icon}
