Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About vrz rrr
08-18-2017
Stats
Member since
09-27-2012
72
Posts
7
Helpful
0
Solutions
03-04-2016
02:24 AM
Hello Rajan,
Yes it is correct.
Can I post here some debug outputs ?
... View more
02-29-2016
02:10 AM
Hello,
I have a lab with UCM 10 and a SIP gateway connected to a PSTN cloud via a PRI (CME routeur, translation rules, 7962 and so on)
When a PSTN phone makes a call to the MVA DN, I ear the greetings and I am prompter to enter my PIN Code.
The system immediately says that it "encountered an internal error" then hangs up.
debug application vxml shows that my RDP DN (the PSTN DN) is recognized ("enter your PIN") , I can see my user's name as well along with the PIN code (clear TXT).
Dial-peers are OK as shown by the debug output.
Can someone please help me ? (I will be giving any relevant debug output as required)
thans in advance.
V.
... View more
Labels:
02-02-2015
04:11 AM
Hello Jonathan, thanks for aswering my call :) So you have to map L-CAC to match your active path. All right. Have a nice day sir. Regards. V.
... View more
02-02-2015
12:48 AM
Hello all, there is something I misunderstand regaring Enhanced Locations CAC. We are told to give some weights to our WAN links that reflect the topology. Ok. Is Enhanced CAC is aware of any topology change ? Let's say we have : A -> 20-> B -> 20 -> C. = 40 and A -> 50 -> C. = 50 The first path will be prefered and let's say is allowing 10 calls (has enought bandwidth for) and the second one only 7. After a network outage between B and C the routing protocol converges and handles only 7 calls based on QOS settings. Is enhanced Location CAC is aware of any topology change ? Best Regards. V.
... View more
Labels:
04-23-2013
11:48 AM
Ok DHCP Snooping was the issue.... The DHCP message response seems to enter back the switch (from the vwlc to the AP ) on the same port it came from. (the Sw acts as a DHCP server) Now I have an IP address assign by DHCP but no connectivity though !!! ..... ...
... View more
04-23-2013
08:45 AM
hello, I still have the issue even whith no security at all !! The wireless client can't get an IP address. I can't explain why the IP is delivered by the DHCP server and is shown on the vwlc ( Monitor > client ) Any ideas ? V.
... View more
04-23-2013
12:24 AM
Salut Philippe, tu cause français sur ce blog anglophone à 100% tu es courageux ;-) Heureusement quelques frenchies sont en veille Le 1131 AG K9 est bien pour ça. Tu peux le trouver sur ebay pas trop cher.
... View more
04-23-2013
12:18 AM
Hello Yahya, I'm using vmware workstation 9 which has promiscuous mode activated by default, the two others options are not present in VM Workstation
... View more
Created by
vrz rrr
in Policy and Access
in Policy and Access
04-12-2013
12:57 PM
04-12-2013
12:57 PM
Hello, like a FW set of rules, I think that ISE's authZ rules should also be ordered with care ? What are the best practices ? Most used first ? Guest, MAB and Webauth at the end ? Tell me... Any screencap is welcome Regards.
... View more
Labels:
Created by
vrz rrr
in Policy and Access
in Policy and Access
04-11-2013
01:44 AM
04-11-2013
01:44 AM
Hello, this document lead to multiple failure !!!! http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml This guy really helps !!! https://www.youtube.com/watch?v=TW2ZJVIZ8bs See attached screen captures. ISE documentation, even published by TAC is not reliable. Bring back the Cisco we liked so much 15 years ago !!!!!
... View more
Labels:
Created by
vrz rrr
in Policy and Access
in Policy and Access
04-10-2013
09:24 AM
04-10-2013
09:24 AM
Hello, again, I have an issue with ACLs and this time it is related to mab webauth redirection (Guest Portal). Logs shows that the connection in pending due to posture status (that's OK), My dACL is applied and... nothing else. I mean Web traffic does not get redirected. (Auth policy mab if user not found continue) See attached files. webauth.jpg : AuthZ policy webauth1.jpg : AuthZ profiles webauth.jpg : live authentication This is my switch port config is : interface FastEthernet1/0/3 description test GUEST MAB switchport mode access ip access-group ACL-ALLOW in authentication order mab authentication priority mab webauth authentication port-control auto mab ACLs : ip access-list extended ACL-ALLOW permit ip any any ! ip access-list extended redirect deny udp any eq bootpc any eq bootps deny udp any any eq domain deny ip any host 192.168.6.10 permit tcp any any eq www permit tcp any any eq 443 !
... View more
Labels:
Created by
vrz rrr
in Policy and Access
in Policy and Access
04-05-2013
12:46 AM
04-05-2013
12:46 AM
Hi Venkatesh, Your the ultimate ISE Guru !! You're right Thanks a lot. See screen captures and Sw config below ----------------------------------------------------------------------- aaa new-model ! aaa group server radius ISE server 192.168.6.10 auth-port 1812 acct-port 1813 server 192.168.6.10 auth-port 1645 acct-port 1646 ! aaa authentication login default local aaa authentication dot1x default group ISE aaa authorization network default group ISE aaa authorization network auth-list group ISE aaa authorization auth-proxy default group radius aaa accounting dot1x default start-stop group ISE ! ! aaa server radius dynamic-author client 192.168.6.10 server-key 123456789 ! ip dhcp snooping ip device tracking ! dot1x system-auth-control dot1x critical eapol ! interface FastEthernet1/0/1 switchport mode access ip access-group ACL-ALLOW in authentication port-control auto authentication periodic dot1x pae authenticator dot1x timeout tx-period 10 spanning-tree portfast spanning-tree bpduguard enable ! ip http server ip http secure-server ! ip access-list extended ACL-ALLOW permit ip any any ip access-list extended ACL-POSTURE-REDIRECT deny udp any any eq domain deny udp any host 192.168.6.10 eq 8905 deny udp any host 192.168.6.10 eq 8906 deny tcp any host 192.168.6.10 eq 8443 deny tcp any host 192.168.6.10 eq 8905 deny tcp any host 192.168.6.10 eq www permit ip any any ! snmp-server community snmp RO snmp-server community RO RO snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart snmp-server enable traps mac-notification change move threshold snmp-server host 192.168.6.10 public snmp-server host 192.168.6.10 version 2c snmp mac-notification radius-server attribute 6 on-for-login-auth radius-server attribute 6 support-multiple radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include radius-server dead-criteria time 5 tries 3 radius-server host 192.168.6.10 auth-port 1645 acct-port 1646 key 123456789 radius-server vsa send accounting radius-server vsa send authentication ! V.
... View more
Created by
vrz rrr
in Policy and Access
in Policy and Access
04-04-2013
11:15 AM
04-04-2013
11:15 AM
up up ! :-) V.
... View more
02-29-2016
Hello, I have a lab with UCM 10 and a SIP gateway connected to a PSTN
cloud via a PRI (CME routeur, ...
02-02-2015
Hello Jonathan,thanks for aswering my call:) So you have to map L-CAC to
match your active path. All...
02-02-2015
Hello all,there is something I misunderstand regaring Enhanced Locations
CAC.We are told to give som...
04-23-2013
Ok DHCP Snooping was the issue....The DHCP message response seems to
enter back the switch (from the...
04-23-2013
hello, I still have the issue even whith no security at all !!The
wireless client can't get an IP ad...
04-23-2013
Salut Philippe, tu cause français sur ce blog anglophone à 100%tu es
courageux;-)Heureusement quelqu...
04-23-2013
Hello Yahya,I'm using vmware workstation 9 which has promiscuous mode
activated by default, the two ...
Created by
vrz rrr
in Policy and Access
04-12-2013
04-12-2013
Hello, like a FW set of rules, I think that ISE's authZ rules should
also be ordered with care ?What...
Created by
vrz rrr
in Policy and Access
04-11-2013
04-11-2013
Hello, this document lead to multiple failure
!!!!http://www.cisco.com/en/US/products/ps11640/produc...
Created by
vrz rrr
in Policy and Access
04-10-2013
04-10-2013
Hello, again, I have an issue with ACLs and this time it is related to
mab webauth redirection (Gues...
Created by
vrz rrr
in Policy and Access
04-05-2013
04-05-2013
Hi Venkatesh, Your the ultimate ISE Guru !!You're rightThanks a lot.See
screen captures and Sw confi...
Public Statistics
| Date Registered | 09-27-2012 12:27 AM |
| Date Last Visited | 08-18-2017 03:56 AM |
| Total Messages Posted | 72 |
| Total Helpful Votes Received | 7 |
Helpful Votes Given To
.jpg "Hall of Fame Community Legend"){kind=icon}
