Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi I've used mobility anchors to do SSID sharing with two other organisations before over a site-to-site VPN - relatively complicated compared to regular Guest mobility anchoring - but despite small problems it worked well, and I understand all the r...
Hi I'm attemping to automatically configure an interface using a template. The template is already on the switch, ISE is pushing the template name with the Authz. Standard IBNS 2.0 stuff. Config here:template APAutoConfigswitchport trunk native vlan ...
Hi
Is it possible for ISE to rename a port after a device has successfully finished a dot1x authentication? I'd like to be able to pull the hostname of the device and put it on the port description and then have it change back to a generic port des...
Hi
We have a 5508 on version 7.3.101.0. I have copied version 8.3.130.0 to it and it's ready to be rebooted. I tried to do a pre-download of the image to all my APs (all AIR-CAP2602I-E-K9) but it didn't go very well. About 200 out of 330 of them im...
Some quick background:
We've entered into a collaboration partnership with some other organisations, we're trying to share our own wireless SSIDs across each others controllers and APs. We are using a site to site VPN with our DMZ WLCs as the inter...
Well, we figured out the problem. The third party had either entered the RADIUS shared secret, or their WLC didn't like the length or characters in the password. I didn't think to check this to begin with, because the MAC filtered SSID we were testin...
The SSID is a FlexConnect one. I always make an interface with an SVI associated with it - even though it isn't used - for all my FlexConnect SSIDs, because I knew I'd be doing Mobility Anchors and devices connecting to foreign WLCs on Flex SSIDs get...
Hi Unfortunately that wouldn't work, for the access point to work you need 'host-mode multi-host' to work, but we don't want the same on an access port connected to a PC. We did figure it out though - for whatever reason, in certain versions, Cisco ...
Thanks for this. Unfortunately we're using 2960X which as far as I can see don't support the EEM scripting? The only way I can see it working is if we use an auto-smart-port macro.
Yes I had seen them but nobody followed up on whether they got it working or not and I'm struggling to find anything else on google. I would have thought that ISE is capable of doing this. It can already change the VLAN on a port and i'm assuming tha...
