Hello, I was missing the remote-span vlan on trunk between switchs. Regards, ... View more

Hello, did find the answer that you was looking for? I've the same problem. ... View more

Hello Kasper, What routing issue did u faced? I´ve the same issue but AP and WLC can see each other. *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 Discovery Request from 10.20.250.195:13575 *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 Discovery apType = 0, apModel = , Discovery supportedRadios = 0, incomingRadJoinPriority = 1, Discovery versionNum = 117637429 *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 AP Model not populated in Discovery Request. Let the AP proceed to Join & veify AP model in Join request. *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 1000, joined Aps =42 *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 Validated Discovery request with dest ip : 10.16.127.1 from AP 10.20.250.195. Response to be sent using ip : 10.16.127.1 *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: Encode static AP manager 10.16.127.1, AP count 42 *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: acEncodeMwarTypePayload encode mwarType = 0 in capwapMwarTypePayload. *Apr 12 11:27:51.446: %IOSXE-7-PLATFORM: 1 process wcm: f8c2.88a3.5060 Discovery Response sent to 10.20.250.195:13575 Regards, _lucas  ... View more

Wesley, Sorry my initial paragraph was a copy from another thread question that I've posted. But my problem is with two pair of N5K that are part of the same vPC domain but when peer-keepalive fail all the vPC get the down state. Regards, Lucas ... View more

Hello, I know that this is a old thread but I'm dealing with an issue that a thought that you can help solving out. I've deployed ISE 2.0 and I've create a policy to match the machine and user certificate but for some reason the computer certificate is being validated and the user certificate not. and I'm receiving the following error: Failure Reason 22056 Subject not found in the applicable identity store(s) Resolution Check whether the subject is present in any one of the chosen identity stores. Note that some identity stores may have been skipped due to identity resoultion settings or if they do not support the current authentication protocol. Root cause Subject not found in the applicable identity store(s).   My client machine is Windows 7(with anyconnect installed) and I've an internal root CA. Regards, AM  ... View more

Hello, Did solved you problem? I've some clients complaining about this issue. Using windows 10 and Windows 8.1. Regards, AM ... View more

Through ASDM I can't see any packet being denied. I've installed the compliance module manually but the posture is not working at all... I've the anyconnect installed but is not being detected by client provisioning portal. Please help. Regards, Alcides ... View more

I'm not using the NAC Agent, if take a look at the folder the binary that is downloaded is the Anyconnect. and I don't what's happening. that communication fail and the download is trying to go to internet. because I've the any connect resources in ISE. regards, ... View more

Hello Marvin, Thanks for your reply... bellow is the ACL that I'm using in redirect ACL. access-list PSN_REDIRECT extended deny udp any any eq domain access-list PSN_REDIRECT extended deny ip any host 10.10.48.135 /// PSN  access-list PSN_REDIRECT extended deny ip any host 10.10.48.136 /// APN access-list PSN_REDIRECT extended deny ip any host 10.16.41.35 access-list PSN_REDIRECT extended permit tcp any any eq www access-list PSN_REDIRECT extended permit tcp any any eq https It seems that the client is trying to connect to cisco.com [Sun May 29 18:17:42.006 2016][acisensa][debug][hs_transport_winhttp_get] unable to send request: 12007 [Sun May 29 18:17:42.006 2016][acisensa][debug][IseDiscovery::HttpDiscoveryCallback] Http callback, target enroll.cisco.com, stat=-5, 0 [Sun May 29 18:17:42.880 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:17:43.894 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:17:44.908 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:17:45.922 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:17:46.889 2016][acisensa][debug][hs_transport_winhttp_get] unable to send request: 12002 [Sun May 29 18:17:46.889 2016][acisensa][debug][IseDiscovery::HttpDiscoveryCallback] Http callback, target 192.168.66.161, stat=-5, 0 [Sun May 29 18:17:46.936 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=0, target status=-5 [Sun May 29 18:57:35.697 2016][acisensa][info][hs_log_init_oneshot] Logging system startup [Sun May 29 18:57:35.697 2016][acisensa][info][CNsaWizardDlg::CNsaWizardDlg] Cisco ISE Network Setup Assistant started. [Sun May 29 18:57:35.713 2016][acisensa][debug][UITranslator::Initialize] Localization path is C:\Users\suise01\Downloads\NACWebAgent\l10n, working path is C:\Users\suise01\Downloads, locale is pt-pt [Sun May 29 18:57:36.790 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=2, target status=2 [Sun May 29 18:57:37.804 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=2, target status=2 [Sun May 29 18:57:38.819 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=2, target status=2 [Sun May 29 18:57:39.834 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=2, target status=2 [Sun May 29 18:57:40.801 2016][acisensa][debug][hs_transport_winhttp_get] unable to send request: 12002 [Sun May 29 18:57:40.801 2016][acisensa][debug][IseDiscovery::HttpDiscoveryCallback] Http callback, target 192.168.66.161, stat=-5, 0 [Sun May 29 18:57:40.848 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:57:41.863 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:57:42.877 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:57:43.892 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=1, target status=-5 [Sun May 29 18:57:44.875 2016][acisensa][debug][hs_transport_winhttp_get] unable to send request: 12007 [Sun May 29 18:57:44.875 2016][acisensa][debug][IseDiscovery::HttpDiscoveryCallback] Http callback, target enroll.cisco.com, stat=-5, 0 [Sun May 29 18:57:44.907 2016][acisensa][debug][IseDiscovery::CancelTimeout] CancelTimeout discoveryRequestCount=0, target status=-5 regards ... View more