About bfoulks

bfoulks · 05-16-2020

Hello,I 'm trying to work out the configuration to provide HA (Active/Standby) between two FTDs running on two FPR4120 to a pair of ASR1002 routers. Each router has a link to each of the FPR4120s. The FTDs are running as routed. EIGRP is will be r...

bfoulks · 04-17-2018

Hello,I am installing ISE 2.3. We have a requirement to utilize the internal user database for READWRITE access and the RSA 2FA for the READONLY to our cisco environment. I was able to do this on my other network with ACS, but a can't figure out ho...

bfoulks · 07-06-2011

Hello,We ran into a problem today after upgrading our 6506-E switchses to VSS with our multicast packets being dropped and I can not figure out why. Need help.Yesterday we were able to to send 32K multicast packets with no issues (yes it gets fragm...

bfoulks · 07-29-2022

Sorry if I wasn't clear. The broadcast configuration is done on the ntp server itself. Without knowing what server you are using, I cant provide the exact configuration details for you.

bfoulks · 07-29-2022

NTP is by default bi-directional. Because of the data diode, blocks the client return traffic. You need to put your ntp server in broadcast mode. Then becomes one-way. Issue with that is accuracy then is degraded, but you'll get it on the other s...

bfoulks · 05-22-2020

Does anyone have any suggestions on how to proceed? Just looking for the smartest design to this HA requirment

bfoulks · 04-18-2018

So based on your link, I was able to work out what 2.3 was looking for. I had to create an authentication rule tied to a condition using the tacacs:user tied to internal and then the default tied to RSA. I then created the two authorization polices...

bfoulks · 04-18-2018

Thank you for the response. That looks similar to how I did it is ACS. Can you help clarify what it would look like in 2.3? I am very confused by its logic and design requirements.

Member Since	‎05-14-2004 12:32 PM
Date Last Visited	‎02-06-2023 05:35 PM
Posts	11
Total Helpful Votes Received	2

User Statistics

User Activity

FTD HA with pair of ASR1002

ISE 2.3 device administration with RSA and Internal

Limit on size of multicast data packet

Re: Cisco C1000-NTP time server with data diode closed system

Re: Cisco C1000-NTP time server with data diode closed system

Re: FTD HA with pair of ASR1002

Re: ISE 2.3 device administration with RSA and Internal

Re: ISE 2.3 device administration with RSA and Internal