About Ezequ!el

Ezequ!el · 12-15-2023

Hi!We are using ISE to authenticate computers connecting to our LAN using EAP-TLS and share those authenticated identities over PxGrid with 3rd party products.The problem we are hitting is PxGrid shares those identities as user identities and not as ...

Ezequ!el · 04-20-2023

Hello,We have a SDA Fabric managed by our DNAC with our C9800 managing the underlay APs. The thing is we have configured different AP Zones to broadcast different set of SSIDs.Now we have the duty to deploy 800 APs, and we are looking for a way to in...

Ezequ!el · 04-13-2023

Hi,I am facing an issue on DNAC. I have the need to migrate an SSID from our old controller to the new C9800. This SSID is anchored to an old WLC which is not managed by me.Within DNAC I can only add a mobility peer if it is managed by DNAC (its a dr...

Ezequ!el · 06-22-2021

Hi, I have created an uSEG EPG with Intra-EPG Isolation enabled, as I do not want EPs to talk to each other inside this uSEG. This uSEG is also not part of the Preferred Groups, as I want to define any flow communication over a contract. I check and ...

Ezequ!el · 09-28-2023

Cisco DNAC does still not allow to configure non managed WLC as anchor. So the best solution as per now is to create a template (incluiding the anchor configuration for the SSID) and attach it everytime you provision the WLC with the concerned SSID f...

Ezequ!el · 04-14-2023

We are managing the WLC from the DNAC, as we have fabric and non fabric SSIDs configured on DNAC.The problem on this specific SSID is, everytime I provision the WLC it brings down the SSID and deletes the anchor configuration I did directly on the WL...

Ezequ!el · 06-25-2021

Hi, Yes VMM is integrated. And yes, if I try to communicate from VMM to Baremetal, Intra-EPG contract is not taken into account and it is just ignored. As seen with ELAM, VMM is then classified as on Base EPG instead in the uSEG. I can see ARP not go...

Ezequ!el · 06-25-2021

Understood. But now I did another test, which its result got me more confused. In the uSEG, I have now one baremetal server with vlan encap 2 and two vmware servers with vlan encap 3. Policies between vmware servers are being enforced as expected, ev...

Ezequ!el · 06-25-2021

Many thanks you both @Sergiu.Daniluk , @Robert Burns At least we have found the explanation. So as far as I understand, if I use MAC address attributes both policies will be enforced; the one which apply for traffic within the same subnet and the on...

Member Since	‎07-28-2017 02:59 AM
Date Last Visited	‎12-22-2023 07:59 AM
Posts	15

User Statistics

User Activity

ISE EAP-TLS identities send over PxGrid as user

SDA - DNAC AP Zones

DNAC - Adding a non managed Anchor WLC

uSEG EPG and Intra-EPG Isolation

Re: DNAC - Adding a non managed Anchor WLC

Re: DNAC - Adding a non managed Anchor WLC

Re: uSEG EPG and Intra-EPG Isolation

Re: uSEG EPG and Intra-EPG Isolation

Re: uSEG EPG and Intra-EPG Isolation