Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Pradeep S.R.
Online
Stats
Member since
05-16-2012
32
Posts
2
Helpful
4
Solutions
Created by
Pradeep S.R.
in VPN and AnyConnect
in VPN and AnyConnect
05-02-2018
03:19 AM
05-02-2018
03:19 AM
Customer is not willing for NAT on their side.
... View more
Created by
Pradeep S.R.
in VPN and AnyConnect
in VPN and AnyConnect
05-01-2018
09:17 AM
05-01-2018
09:17 AM
I have customer site A & B connecting to Datacenter C &D with same LAN subnet on Customer site A &B.
Datacenter C&D will have site to site VPN tunnel to A&B. I have enabled RRI in the Datacenter firewalls.In essence both the datacenters will learn the same remote network and redistribute this network into IGP thus creating a routing conflict for all the remote sites which try to connect to the remote network.
As you know RRI will always insert a static route irrespective of the tunnel status.
I would like the remote location to always go through Data center C Site to site VPN tunnel and use Data center D in case of any issues with VPN tunnel on "C" side.
Is there a way I can achieve VPN redundancy using this scenario.Please help me with this.
Note:- customer is not agreeing for Natting the network on their side.
... View more
Labels:
Created by
Pradeep S.R.
in Policy and Access
in Policy and Access
08-22-2017
11:27 PM
08-22-2017
11:27 PM
Hi Guys, I am planning to take 300-208 exam if i pass this will it renew my current ccnp routing certificate for 3 more years?. Please let me know ASAP as my current certificate expire in 2 weeks, quick input and suggestions appreciated
... View more
Labels:
06-24-2016
08:54 AM
Hi Roman,
We are using Anyconnect 4.2.02075 and ISE 1.4 version and all of sudden we seeing the certificate errors for some wireless(MAC OS) users.
issue : client is trying to trust PSN local certificate but which is not configured for EAP authetication at all.
how user is getting the response to trust the cert which is not configured??
Error screenshot attached.
... View more
06-21-2016
02:33 AM
Hi Jack,
I want to keep MAB policy on top and dot1x policy below in authorization policy,- Yes
If suppose HP Printers which are profiled as a HP -Device in ISE , can I statically map these device to a particular static group instead of automatic mapping to HP-Device- Yes you can do that.
Cheers,
Pradeep
... View more
06-17-2016
04:18 AM
Hi Jack,
q 1? Yes you have to check endpoint details from Administration->Identity Management->Identities->Endpoints (screenshot attached)
q 2? if you go the profiling architecture and CF (Certainty Factor) value - section guide it helps to u.
Q 3? yes it helps- you can statically map failing device to particular group -it is feasible solution small scale deployment and for large scale dynamic profiling is better option.
... View more
06-17-2016
03:37 AM
Hi Jack,
yes it is running and the PC NIC configuration are as the below link. please confirm that I am on the correct path.
Yes you are on right path.
Cheers,
Pradeep
... View more
06-17-2016
02:20 AM
Hi Jack,
system is hitting the deny policy as there is no 802.1x request from the PC and there is MAB authz allowed for that devices- that is reason you are getting that error,
Do you configured MAB(Mac address bypass) authz policy for the windows devices? if yes please verify the policy.
Problem looks like with PC just verify the wiredautoconfig service is running in PC? there are no certificate related errors?
as you said some of the PC's are working then it clearly indicate problem with system not ISE,
Ref Link:
https://supportforums.cisco.com/blog/12256681/getting-past-intermittentunexplained-8021x-problems-windows-7
Microsoft
https://support.microsoft.com/en-us/kb/2736878
Cheers,
Pradeep
... View more
06-13-2016
09:50 AM
Hi Jack,
I meant to say if none of the 3 options work then only we should go with authz policy without any profiling attribute in that- it means policy should not depend on any profiling parameter
... View more
06-13-2016
07:51 AM
Hi jack,
To get the profiling accuracy - we should enable( DNS,DHCP,SNMP, SNMPTRAP, RADIUS) -profiler option in profiler configuration.-
there are 4 options to achieve this.
1. check logs and see on which parameter device is getting profiled as HP device? (like radius,dns or dhcp).
2. u have to tweak the profiling policy for the HP -device and other workstation devices - please refer the Cisco profiling accuracy -http://www.cisco.com/c/dam/en/us/td/docs/security/ise/how_to/HowTo-30-ISE_Profiling_Design_Guide.pdf
3. still profiling accuracy fails - create customised profiling policy for HP-workstation
or
4. create autz policy based on 802.1x attribute and with the domain group-(users AD group) without any device profile.to overcome profiling issue,.
Cheers,
Pradeep
*** Rate if it helps
... View more
06-13-2016
06:51 AM
Hi Jack,
Please let me know which version of ISE you are using and do u created the ISE Authz policies based on device profile or only 802.1x attribute?
1. by looking at the screenshot I can see device is getting profiled as cisco device ?
2. u need to compare the policy for working device and non- working HP PC- as in screenshot shows device sending the authentication- MAB(Mac address bypass) method.
3. yes - by default radius suppress setting is enabled in ISE- you can verify in settings->protocol->Radius protocols-settings -it only applies to devices if Reject Request After Detection is enabled and policy will be in effect till the request rejection interval time specified-
share the details- will suggest the fix.
Cheers,
Pradeep
*** Rate if it helps
... View more
Created by
Pradeep S.R.
in Firewalls
in Firewalls
09-04-2012
04:53 AM
09-04-2012
04:53 AM
Hi.. Hi Can anyone explain how IPS works in ASA firewalls and SSL/IPSEC VPN configurations?
... View more
Labels:
Created by
Pradeep S.R.
in Firewalls
in Firewalls
09-03-2012
05:09 AM
09-03-2012
05:09 AM
Thank you Karthik...
... View more
Created by
Pradeep S.R.
in Firewalls
in Firewalls
09-03-2012
05:09 AM
09-03-2012
05:09 AM
Thank you.. Jcarvaja..
... View more
Created by
Pradeep S.R.
in Switching
in Switching
08-31-2012
05:03 AM
08-31-2012
05:03 AM
Hi Tanoop, U need to enable intervlan routing for the Server to communicate with that. Refer Below Docs as well... http://networkcity.blogspot.in/2010/01/configuring-inter-vlan-routing-and-dhcp.html?spref=fb http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a008019e74e.shtml Regards Pradeep Poojari Please rate if it Serves you
... View more
09-05-2019
Hi Team, Please let me is there any document: Integrate Cisco ISE with
Micosoft Azure(Cloud) server ...
11-15-2018
Hi I am dealing with one strange issue anyone come across this ? In ISE
Radius logs user are getting...
Created by
Pradeep S.R.
in Identity Services Engine (ISE)
11-13-2018
11-13-2018
Hi i am looking for RBAC policy for read only users but i think ISE 2.1
version does not support ful...
Created by
Pradeep S.R.
in Identity Services Engine (ISE)
11-13-2018
11-13-2018
Hi i am looking for RBAC policy for read only users but i think ISE 2.1
version does not support ful...
Created by
Pradeep S.R.
in VPN and AnyConnect
05-02-2018
05-02-2018
Customer is not willing for NAT on their side.
Created by
Pradeep S.R.
in VPN and AnyConnect
05-01-2018
05-01-2018
I have customer site A & B connecting to Datacenter C &D with same LAN
subnet on Customer site A &B....
Created by
Pradeep S.R.
in Identity Services Engine (ISE)
03-12-2018
03-12-2018
Hi Warren,Yes, It can be done.Options are,1. If your device are
integrated with ISE Tacacs+ Solution...
Created by
Pradeep S.R.
in Policy and Access
08-22-2017
08-22-2017
Hi Guys, I am planning to take 300-208 exam if i pass this will it renew
my current ccnp routing cer...
07-10-2017
Hi Joseph,I can see in the Cisco Bug tool it is fixed. PFAYou can
download the latest version of Any...
Created by
Pradeep S.R.
in Identity Services Engine (ISE)
07-07-2017
07-07-2017
ISE 2.1 GUI is not displaying any log and showing no data found and i m
running 2.1 Patch 3 version....
Public Statistics
| Date Registered | 05-16-2012 12:19 AM |
| Date Last Visited | 09-16-2019 03:49 AM |
| Total Messages Posted | 32 |
| Total Helpful Votes Received | 2 |
Helpful Votes Given To
.jpg "VIP Advocate"){kind=icon}
