Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Ryan Curry
Stats
Member since
12-08-2009
145
Posts
18
Helpful
5
Solutions
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-11-2019
08:39 AM
03-11-2019
08:39 AM
Sorry to drum up a year and a half old thread, but has anyone gotten the Flex Local Switching with Dynamic VLAN Assignment working? I've got a group of roughly 25 APs that are in a flex group where users are reporting no longer able to broadcast from their wireless phones. I suspect this is because I've recently moved them to this exact scenario (trying to reduce my WLC footprint). Any insight would be appreciated.
... View more
08-21-2018
09:48 AM
Hi all, I have what I hope is a pretty simple question / issue. Just recently kicked off dot1x wired in monitor mode and I'm profiling phones, APs, and printers fine for the most part. In my policy, I have entries matching the endpoint profile that should permit access. The issue is that when I enable dot1x on the ports and they hit ISE, they match the default policy. If I clear the authentication on the ports with these devices, they'll then hit the right policy. I've set the profiling policy to do a COA reauth afterwards hoping that'd send it back through the policy process but so far it's not.
Is there something I'm missing or is that just how it's designed? My concern is that when we go to low impact, a new device will get plugged in and it won't hit the right policy until it reconnects.
Thanks in advance!
... View more
Labels:
Created by
Ryan Curry
in Smart Net Total Care Portal and Collector Discussions
in Smart Net Total Care Portal and Collector Discussions
08-16-2017
06:56 AM
08-16-2017
06:56 AM
Thanks Teresa, I completely agree and have had that discussion with the client - typically for this client we don't see upgrades on non-covered equipment, but they have had rogue admins in the past and didn't want to get burned.
... View more
08-14-2017
12:19 PM
You could debug the connection. For me, I prefer doing it through the GUI since it opens a different window. Make sure you have your logging filter set to Debugging for ASDM (configuration/logging/logging filters/asdm). Once you've done that, you can go to monitoring/logging/view real-time log. In this new window, enter "FILTER:dstPort=500,4500;" (without quotes) - this should show all connections that are hitting ISAKMP (or NAT-T ISAKMP).
... View more
08-14-2017
12:04 PM
Hi Simon, looking over your question you are correct on all assumptions. The inside interface is typically your most trusted environment (i.e. what you or your organization has control over) whereas outside is that which you have little to no control over.
Your default route will point to the 10. network since you're essentially saying "I don't have a specific route to this traffic so it must go to you".
You would NAT the 192. addresses into the 10. addresses so that the packet, once it's outside of your network which would be the 10. space, knows how to get to the next route.
You would again need to NAT the 10. address because the 10.x.x.x space does not route on the Internet so it needs to be assigned a real address via NAT.
... View more
08-14-2017
11:23 AM
Just browsing this sub and thought I'd give a shout back. Yes, you can do this but you'll need to create objects for the IP addresses prior to adding the NAT statements and then reference those objects in the NAT statement; in the examples I'll simply use obj-<ip_address> to make it easy. Also, I'm going to presume the interfaces are INSIDE and OUTSIDE, if not simply adjust the verbiage to your needs:
For Application 1:
nat (inside,outside) source dynamic obj- 10.60.2.37 obj-NAT-192.168.123.150 destination static obj-192.168.123.171 obj-192.168.123.171
For Application 2:
nat (inside,outside) source dynamic obj- 10.60.2.37 obj-NAT-192.168.123.160 destination static obj-192.168.123.221 obj-192.168.123.221
... View more
Created by
Ryan Curry
in Smart Net Total Care Portal and Collector Discussions
in Smart Net Total Care Portal and Collector Discussions
08-14-2017
08:08 AM
08-14-2017
08:08 AM
I have a customer that is looking to implement the collector for SNTC but they had a question that I don't know the answer to. They asked if they were to perform a code upgrade on a device that isn't covered under SmartNet, would it throw up a red flag at Cisco because the inventory info had changed yet they didn't have the device covered?
I thought they wouldn't get in trouble (though I suggested they cover all devices under SmartNet if they plan to upgrade) as it is more of an information tool but I wanted to get the thoughts of you on here.
Thanks in advance!
... View more
- Tags:
- SNTC General
Labels:
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
07-19-2017
10:29 AM
07-19-2017
10:29 AM
Thanks for he head's up, I'm glad I waited. Part of me was concerned with running an escalation image in our production environment for fear of something like this coming to light. You're a hell of an asset to these boards! By the way, that Genesis IT post is actually mine that I posted from our organization CCO account, not my personal one (which is this one).
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
07-17-2017
11:59 AM
07-17-2017
11:59 AM
Andy, I wish I had a solution or answer for you, but I don't. I just wanted to add that I'm seeing the same problem with my Aeroscout tags. I can see their current location but when I look at the history I'm met with "No location history found for the Tag". For what it's worth, I'm running version 8.0.140.0 on a virtual MSE HA pair.
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
07-10-2017
08:17 AM
07-10-2017
08:17 AM
Thanks Leo, I'll be sure to hit TAC up for this image. I greatly appreciate the insight!
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-28-2017
02:10 PM
06-28-2017
02:10 PM
Yes, we are running 7925G phones on the 5Ghz band.
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-28-2017
07:19 AM
06-28-2017
07:19 AM
Hi all, I want to push the 8.3.121.0 code to my 5520 due to the 3802s playing nice with Aeroscout in this code version. Is anyone running this code on that platform and has it been stable? I told my organization that I wanted to wait at least a month after release before going to it just to make sure it's stable. So far I'm not seeing any negative experiences, but I'm also not seeing any positive. Just looking for feedback.
TIA!
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
04-12-2017
12:05 PM
04-12-2017
12:05 PM
Thanks for the reply and I'll look at the release notes for that version, but it appears that this may be fixed in version 8.3.112.0 as noted in the release notes here:
RFID and Wi-Fi Tag Support
802.11 (Wi-Fi) active RFID tags are designed to operate in the unlicensed ISM bands of 2.4 to 2.4835 GHz or 5.8 to 5.825 GHz....
This feature support now extends to the following Cisco APs:
Cisco Aironet 1560 Series APs
Cisco Aironet 1800 Series APs
Cisco Aironet 2800 Series APs
Cisco Aironet 3800 Series APs
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
04-12-2017
10:24 AM
04-12-2017
10:24 AM
Hey all, I'm at a loss on this one - I've deployed a total of about 30 new 3802is over two floors of an existing campus (new construction connecting to existing campus). Aeroscout engineers are here to help configure some of their exciters and they reported that their RFID tags aren't showing up for this new location. These new APs are serviced by the same controller for the existing campus where are not experiencing the issue. At this point, all I've done is rename the AP and place it correctly on the map - which has been synced with the MSE and Aeroscout as well. I haven't been able to track down any bugs that would affect this and may have to open up a TAC case (which is interesting as I don't know if I need to open as a WLC issue or MSE issue). My environment is as follows:
WLC - HA pair running 8.2.140.0
MSE - HA virtual pair running 8.0.130.0
Prime Infrastructure - 3.1.5 Update 1
APs connecting into a 4510 VSS pair running 3.8.2 (Sup 8)
TIA
... View more
01-16-2017
06:41 AM
FYI for anyone else having this issue, this is a bug in MR 4 that is supposedly fixed in MR 5. I'm waiting for that release to validate it's actually fixed.
... View more
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
03-11-2019
03-11-2019
Sorry to drum up a year and a half old thread, but has anyone gotten the
Flex Local Switching with D...
08-21-2018
Hi all, I have what I hope is a pretty simple question / issue. Just
recently kicked off dot1x wired...
02-16-2018
So I was finally able to get a TAC engineer to work on the issue and
after about 4 - 5 hours he was ...
01-25-2018
So I did some more testing and can see one of the users I'm having the
issue with log in. Yet, when ...
01-25-2018
Yup, I'm getting a fair amount of users listed in there and most are
discovered by passive authentic...
01-24-2018
Alright experts, I need some assistance because this isn't making a lick
of sense. I have a customer...
Created by
Ryan Curry
in Smart Net Total Care Portal and Collector Discussions
08-16-2017
08-16-2017
Thanks Teresa, I completely agree and have had that discussion with the
client - typically for this ...
08-14-2017
You could debug the connection. For me, I prefer doing it through the
GUI since it opens a different...
08-14-2017
Hi Simon, looking over your question you are correct on all assumptions.
The inside interface is typ...
08-14-2017
Just browsing this sub and thought I'd give a shout back. Yes, you can
do this but you'll need to cr...
Created by
Ryan Curry
in Smart Net Total Care Portal and Collector Discussions
08-14-2017
08-14-2017
I have a customer that is looking to implement the collector for SNTC
but they had a question that I...
07-19-2017
Thanks for he head's up, I'm glad I waited. Part of me was concerned
with running an escalation imag...
Created by
Ryan Curry
in Other Wireless - Mobility Subjects
07-17-2017
07-17-2017
Andy, I wish I had a solution or answer for you, but I don't. I just
wanted to add that I'm seeing t...
Public Statistics
| Date Registered | 12-08-2009 07:33 AM |
| Date Last Visited | 05-08-2019 10:25 AM |
| Total Messages Posted | 145 |
| Total Helpful Votes Received | 18 |
Helpful Votes From
