Dear allGreenfield deployment, we're expecting like 500 Switches at 100 Sites and 1500 APs sprinkled across them to submit their RADIUS-Requests to a pair of ISEs. ISE are not going to do device administration (TACACS) for these.
SrcIP of RADIUS re...
Hi allWe're trying to tackle a DHCP relay problem between a set of N9K-C9332PQ (NXOS 9.3.2) and dnsmasq (doesn't work) resp Windows 2016 DHCP service (works with some tweaking).SITUATION:We have a BGP EVPN VXLAN (L2VNI and L3VNI) with anycast gateway...
Hi allI have a nagging problem with fresh setup of ISE 2.4 (Patch 10 already applied) and a certificate CN conflict I can't resolve. Background Info:Intended final setup is a 2 node Cluster with Admin, PSN, and MnT Roles, for ~250 sessions with MAB...
Hi all We have an ISE 2.2 Patch 13 setup, and followed the recommendation in the Install Guide to set UTC for the deployment. The customer has limited admin access to the ISE's live logs and radius logs, but is not quite happy with the timestamps in...
For what it's worth:radius-server attribute 32 include-in-access-req format %h ... does make the switch's hostname appear as "NAS Identifier" in the Authentication Detail report. Neither Live Logs nor Live Sessions seem to be able to show this as a c...
@ez9 wrote: So, If this is bug I suppose I should wait from Cisco to resolve it. Unfortunatelly I haven't an active service contract for these devices in order to report this (possible) bug.https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh68802We o...
... and another thread from dnsmasq's Mailing List:https://dnsmasq-discuss.thekelleys.org.narkive.com/jSbR3kHf/dnsmasq-not-sending-ack#post9Quote (by dnsmasq's maintainer): It would be worth reading RFC 5107 to get more background on this.The idea is...
Hi ArneDon't get me wrong, I'm all in favour of running the ISE with UTC, and I have no issue with following the recommendation from the Confguration Guides - for the precise reason you're highlighting. What nags me is the inconsistent use of 12hr vs...
