Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About cpratt
10-09-2017
cpratt
Member since
06-14-2009
Beginner
01-22-2013
06:29 AM
Hello, I currently have a dedicated ASA for terminating VPN connections and was wondering if there is a way I can route AnyConnect users to a different default route than out the firewalls outside Interface. The business requirement for this is for the users to go through a web content filter. Currently the ASA is on a direct Internet connection. Thanks, Chris
... View more
- Tags:
- anyconnect
- ssl_vpn
Labels:
11-20-2012
11:03 AM
Thanks! That's what I thought but wanted to confirm. Sent from Cisco Technical Support iPhone App
... View more
11-20-2012
06:27 AM
Hello, I am curious to know if there is a way to make a full tunnel for a L2L option. I need to have all Internet traffic go through a trusted Internet connection. I know I can do this doing GRE over IPSec but was hoping for an alternative solution. Thanks in advance -Chris
... View more
Labels:
Re: WCS not Emailing Alarms
in Wireless Security and Network Management
08-14-2012
05:57 AM
08-14-2012
05:57 AM
I was able to resolve the issue. The server got rebooted without my knowledge due to a new patching system. When the server came back up most of the services came up, but WCS did not fully restore. A restart of the WCS service was able to fix this.
... View more
Created by
cpratt
in Policy and Access
in Policy and Access
07-05-2012
06:00 AM
07-05-2012
06:00 AM
Does anyone have a good walkthrough on how to setup ACS 5.3 to authenticate wireless users over radius? I currently have the SSID pointing to a Microsoft IAS server and would like to move the authentication to be done via ACS. Thanks, Chris
... View more
Labels:
Created by
cpratt
in Wireless Security and Network Management
in Wireless Security and Network Management
04-12-2012
12:59 PM
04-12-2012
12:59 PM
Have you heard anything back on how this request went? I am looking for the exact same feature and would like to avoid creating user accounts on WCS to apply a template.
... View more
Created by
cpratt
in Wireless Security and Network Management
in Wireless Security and Network Management
04-03-2012
08:52 AM
04-03-2012
08:52 AM
Hi Steve, Do you have a configuration guide on how to get WCS to use LDAP for creating a lobby ambassador account? I am not having any luck finding one.
... View more
03-31-2012
05:36 PM
I've experienced the same thing happen last week due to poor timing. Some weird stuff happened with applications that used to work where they now needed to be bypassed. This could be due to using application filtering instead of URL Did you have the same problems? Sent from Cisco Technical Support iPad App
... View more
03-31-2012
05:28 PM
Ping is blocked by default on an asa. Make sure you are inspecting icmp Chris Sent from Cisco Technical Support iPad App
... View more
Created by
cpratt
in Wireless Security and Network Management
in Wireless Security and Network Management
03-23-2012
09:16 AM
03-23-2012
09:16 AM
Hi all, I am currently implementing the use of the lobby ambassador for guest account creation, however I am looking to see if some features exist. I would like to be able to tie into AD to create lobby ambassador's to have further control of who can and cannot create guest accounts. I am also looking if there is a way to put restrictions on the time frame a guest account can remain active for when created by the lobby ambassador. An example of what I am trying to do is to not have a guest account created by an ambassador to go over a day for it's time frame. Thanks in advance, Chris
... View more
01-11-2012
07:34 AM
The radius server is setup to look for match "Ethernet" and Domain User to grant access permission.
... View more
01-11-2012
07:32 AM
01-11-2012
05:56 AM
I can ping between the server and the switch (sourcing the user vlan) I have dot1x authentication enabled on the OS. I'll need to double check the remote access policies-
... View more
01-10-2012
08:17 AM
Hi everyone, I am having a problem with getting port authentication to work correctly. The laptop cannot get a DHCP address from the dot1x enabled port. I believe I have all the configuration correct. aaa authentication dot1x default group radius aaa authorization network default group radius ! dot1x system-auth-control ! interface FastEthernet0/2 description *** User with Phone *** switchport access vlan 60 switchport mode access switchport voice vlan 61 srr-queue bandwidth share 10 10 60 20 srr-queue bandwidth shape 10 0 0 0 mls qos trust cos auto qos voip trust dot1x port-control auto dot1x reauthentication spanning-tree portfast ! radius-server host 172.25.101.250 auth-port 1812 acct-port 1813 key ******** Attached is a debug from the switch. Radius is working correctly as I can see my laptop connect when I remove the port configuration. I am currently testing this configuration on a 3560 running c3560-advipservicesk9-mz.122-25.sed1.bin Thanks, Chris
... View more
Labels:
Created by
cpratt
in Wireless and Mobility
in Wireless and Mobility
12-14-2011
06:14 PM
12-14-2011
06:14 PM
figured out the problem. Needed to make the switch port a trunk and change the native vlan. Thanks all for the input Sent from Cisco Technical Support iPad App
... View more
01-22-2013 06:29 AM
Hello,I currently have a dedicated ASA for terminating VPN connections
and was wondering if there is...
11-20-2012 11:03 AM
Thanks! That's what I thought but wanted to confirm.Sent from Cisco
Technical Support iPhone App
11-20-2012 06:27 AM
Hello,I am curious to know if there is a way to make a full tunnel for a
L2L option. I need to have ...
Created by
cpratt
in Wireless Security and Network Management
08-14-2012 05:57 AM
08-14-2012 05:57 AM
I was able to resolve the issue. The server got rebooted without my
knowledge due to a new patching ...
Created by
cpratt
in Policy and Access
07-05-2012 06:00 AM
07-05-2012 06:00 AM
Does anyone have a good walkthrough on how to setup ACS 5.3 to
authenticate wireless users over radi...
Created by
cpratt
in Wireless Security and Network Management
04-12-2012 12:59 PM
04-12-2012 12:59 PM
Have you heard anything back on how this request went? I am looking for
the exact same feature and w...
Created by
cpratt
in Wireless Security and Network Management
04-03-2012 08:52 AM
04-03-2012 08:52 AM
Hi Steve,Do you have a configuration guide on how to get WCS to use LDAP
for creating a lobby ambass...
03-31-2012 05:36 PM
I've experienced the same thing happen last week due to poor timing.
Some weird stuff happened with ...
03-31-2012 05:28 PM
Ping is blocked by default on an asa. Make sure you are inspecting
icmpChrisSent from Cisco Technica...
Created by
cpratt
in Wireless Security and Network Management
03-23-2012 09:16 AM
03-23-2012 09:16 AM
Hi all,I am currently implementing the use of the lobby ambassador for
guest account creation, howev...
01-11-2012 07:34 AM
The radius server is setup to look for match "Ethernet" and Domain User
to grant access permission.
01-11-2012 05:56 AM
I can ping between the server and the switch (sourcing the user vlan)I
have dot1x authentication ena...
01-10-2012 08:17 AM
Hi everyone,I am having a problem with getting port authentication to
work correctly. The laptop can...
Created by
cpratt
in Wireless and Mobility
12-14-2011 06:14 PM
12-14-2011 06:14 PM
figured out the problem. Needed to make the switch port a trunk and
change the native vlan. Thanks a...
Public Statistics
| Date Registered | 06-14-2009 11:23 AM |
| Date Last Visited | 10-09-2017 01:03 PM |
| Total Messages Posted | 28 |
| Total Helpful Votes Received | 5 |
