Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi I've used mobility anchors to do SSID sharing with two other organisations before over a site-to-site VPN - relatively complicated compared to regular Guest mobility anchoring - but despite small problems it worked well, and I understand all the r...
Hi I'm attemping to automatically configure an interface using a template. The template is already on the switch, ISE is pushing the template name with the Authz. Standard IBNS 2.0 stuff. Config here:template APAutoConfigswitchport trunk native vlan ...
Hi
I am testing changing our switch config over from old style to new IBNS 2.0. I have it working but was hoping someone could check it for me and see if i'm on the right track and help me with a couple of things:
service policy:
policy-map type ...
Hi
Is it possible for ISE to rename a port after a device has successfully finished a dot1x authentication? I'd like to be able to pull the hostname of the device and put it on the port description and then have it change back to a generic port des...
Hi
having a few problems with our EIGRP WAN over a L2 VPLS. We have primary and backup fibre or ADSL lines at almost all sites (55 in total) with 2 core sites that have 4506s (Supervisor 7E) and a non-core site with a 4503. The non-core sites eithe...
Well, we figured out the problem. The third party had either entered the RADIUS shared secret, or their WLC didn't like the length or characters in the password. I didn't think to check this to begin with, because the MAC filtered SSID we were testin...
The SSID is a FlexConnect one. I always make an interface with an SVI associated with it - even though it isn't used - for all my FlexConnect SSIDs, because I knew I'd be doing Mobility Anchors and devices connecting to foreign WLCs on Flex SSIDs get...
Hi Unfortunately that wouldn't work, for the access point to work you need 'host-mode multi-host' to work, but we don't want the same on an access port connected to a PC. We did figure it out though - for whatever reason, in certain versions, Cisco ...
Thanks for this. Unfortunately we're using 2960X which as far as I can see don't support the EEM scripting? The only way I can see it working is if we use an auto-smart-port macro.
Yes I had seen them but nobody followed up on whether they got it working or not and I'm struggling to find anything else on google. I would have thought that ISE is capable of doing this. It can already change the VLAN on a port and i'm assuming tha...
