About David Bird

David Bird · 10-04-2019

This is the last step in a migration from ACS to ISE. ACS is running 5.8 on the last patch, and ISE is running 2.4p9. The two SSIDs involved here are for BYOD managed by MobileIron with a very limited trust check in ACS or ISE. The only difference be...

David Bird · 07-12-2018

I have set up a pretty wide open policy set for some Juniper firewalls, and it is allowing the authentication in ISE, but the same auth still fails on the Junipers. Any ideas?

David Bird · 07-14-2017

I have a cluster that I have fully broken, I think. It is ACS 5.5, and this Primary / Secondary pair were being readied for update to Patch 10 from NO PATCH, in preparation to join a larger cluster that are already at 5-5-0-46-10.I noticed that the S...

David Bird · 03-07-2013

Hello All, I have a problem with a Site to Site VPN configuration between an ASA 5505 and a 1941 ISR. I can get tunnels without NAT up without any difficulty, but there are several remote sites with the same inside network which need NAT to traverse ...

David Bird · 07-14-2017

and there's this: there is something odd happening when the primary shows :::: instead of IPs like 127:0:0:1 or 0:0:0:0 on a "show ports" from the CLI

David Bird · 07-14-2017

Also, I have been told that there was a command that was used on the Primary to open all ports in preparation for registering Secondary instances. Is that true? if so, what is that command?

Member Since	‎02-02-2011 10:47 AM
Date Last Visited	‎04-23-2021 07:11 AM
Posts	6

User Statistics

User Activity

EAP-TLS authentication ending with "client alert message"

is there a relatively easy way to enable the Juniper Radius dictionary in ISE 2.2?

Primary ACS not responding to registration requests

Site to Site VPN with NAT Problem

and there's this: there is

Also, I have been told that