Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dmooregfb
07-20-2019
Stats
Member since
11-09-2006
67
Posts
36
Helpful
2
Solutions
Created by
dmooregfb
in Security Analytics
in Security Analytics
07-12-2018
04:59 AM
07-12-2018
04:59 AM
John, we are running 8.4.100.0 on our WLC and upgraded to Stealthwatch 6.10.2. With that and configuring for SNMP3 our problem has been resolved. What is your setup?
... View more
Created by
dmooregfb
in Security Analytics
in Security Analytics
06-18-2018
04:16 AM
06-18-2018
04:16 AM
Dave, did you get any more information on this? I have the configuration set on my WLC but am not seeing in my FlowCollector. Thanks, Dave
... View more
Created by
dmooregfb
in Policy and Access
in Policy and Access
02-28-2018
11:43 AM
02-28-2018
11:43 AM
Experiencing this problem on a number of occasions due to upgrades and whatnot. Our fix is always to check the certificates to ensure matching and validate the userID / password between the two devices. Both have broken the connection (red x) May need to "jumpstart" again by walking through the configuration on Stealthwatch.
... View more
09-08-2017
08:06 AM
Did you ever get the answer for this question? I am seeking a similar problem with TAC. But I am using a Member Server to communicate with ISE using an Agent. Thanks Dave
... View more
09-12-2016
05:21 AM
Had to rebuild our ISE Primary and Secondary (HA) appliances due to hardware failure. At this time I upgraded the disk capacity with mirrored drives with HSP. In the rebuild I was unable to use my backup.
So my question is: must I generate a new Certificate Signing Request (CSR) to get my certs to bind properly?
Thanks,
Dave
... View more
- Tags:
- #AAA #Identity #ISE
Labels:
12-10-2015
02:03 PM
Charles, can you put me in touch with your cisco connection on this? I am working with a 3172PQ and having some issues too.
Thanks,
Dave
... View more
11-16-2015
04:50 AM
I have a group policy set for user maximum access to 10 hours. Is there a way to warn the user the disconnect is about to occur? Unable to find in the documentation.
ASA Code - 9.1.6(10)
AnyConnect - 4.2.00096
Thanks in advance,
Dave
... View more
- Tags:
- anyconnect
- vpn
Labels:
12-19-2014
04:12 AM
If I understand what you are wanting to do, only allow the 197.x.x.x address to access the server via SSH, change the service from ip to tcp/ssh. Clear conn and test again.
... View more
12-18-2014
05:41 AM
Looking for some guidance with a problem. I have 3 Nexus 2248T switches dual homed to 2 Nexus 5672 in the core. (See Attachment) Problem: on one of the FEX I have an Exchange NLB cluster. Several of our systems that require POP3 mail to communicate messaging have experience connectivity issues (unable to send mail) and require the connection to be hard coded to one of the IP Address in a cluster server instead of the NLB address. Configuration: I have not setup Spanning-tree on the trunk ports from the 5672s and am showing that BPDU guard is disabled for the edge ports. Nexus5672-1# sh spanning-tree summary totals Switch is in rapid-pvst mode Root bridge for: none Port Type Default is disable Edge Port [PortFast] BPDU Guard Default is disabled Edge Port [PortFast] BPDU Filter Default is disabled Bridge Assurance is enabled Loopguard Default is disabled Pathcost method used is short STP-Lite is enabled Question: I am thinking I missed the "boat" on the configuration and need to include spanning-tree at the port level to correct the problem. Any advice please?
... View more
Labels:
Created by
dmooregfb
in Policy and Access
in Policy and Access
09-09-2014
09:11 AM
09-09-2014
09:11 AM
after running a second set of traces to provide TAC with additional information, we saw a problem with the configuration. The traces showed the view desktop was attempting to directly setup on the client. This was not suppose to be the case, as the client is outside and PCoIP was to be handling the connection between the Secure Gateway servers and the thick client. Reviewing the connection and gateway servers configuration it was determined that PCoIP was configured but not enabled. After enabling, all thick clients were able to connect properly. Thanks, Dave
... View more
Created by
dmooregfb
in Policy and Access
in Policy and Access
09-05-2014
08:38 AM
09-05-2014
08:38 AM
We have updated our UCS equipment and bringing VDI online with the new VMware Horizon 6.0. In the firewall (ASA 5525x) buildout I have run into a stumbling block and am unable to render the desktop. Just get a black screen. There is a HTTPs type connection called Blaster Desktop. It is working correctly. So when using the thick client, Horizon Client 3.x, we are unable to get a desktop to render. With a HTTPs connection running, I can log on with the thick client and watch as it grabs the Blaster desktop. Just unable to render the desktop. If anyone has experience in this scenarios, please help! Attached is a diagram with the connection and ports defined. Note: I am still able to use the thick client to connect to our old UCS. But in VMView 5.2 changes were made to how the SSL piece is handled and the firewall is not playing very well... Thanks, Dave
... View more
Labels:
06-03-2014
05:26 AM
Jan, thanks for the info. I certainly will check it out. I know that 8.4 change the NAT game and this configuration was an upgrade from 8.2x. Regards, Dave
... View more
06-02-2014
11:33 AM
I recently attempted to move from a ASA 5510 over to a spare 5520 running the same code (8.4.1) and ran into a problem with NAT to the Internet. I had set the same public IP address due to several vendors accepting only this certain address. So, when I migrated to the new 5520, NAT on this address did not work, meaning no traffic outbound would pass. However, if I change to another Public address no problems with traffic passing as expected.
So my question is, I am migrating to a scratch-built 5525x using 9.1x code and will be using the same Public NAT address as on the 5510. Should I expect traffic to pass as expected or do I need to migrate to another address? Logic is telling me there should be no issues, but recent experience is making me jittery...
Thanks for any comments
Dave
... View more
Labels:
03-11-2014
09:24 AM
Jouni Forss , this worked out correctly. I removed all NAT parms and reconfigured. It appeared as there was a twice NAT going on. Thanks for your time, Dave
... View more
Created by
dmooregfb
in Security Analytics
07-12-2018
07-12-2018
John, we are running 8.4.100.0 on our WLC and upgraded to Stealthwatch
6.10.2. With that and configu...
Created by
dmooregfb
in Security Analytics
06-18-2018
06-18-2018
Dave, did you get any more information on this? I have the configuration
set on my WLC but am not se...
02-28-2018
Experiencing this problem on a number of occasions due to upgrades and
whatnot. Our fix is always to...
09-08-2017
Did you ever get the answer for this question? I am seeking a similar
problem with TAC. But I am usi...
Created by
dmooregfb
in Identity Services Engine (ISE)
09-06-2017
09-06-2017
hslai, thanks for the information. Will keep the lines of communication
open with TAC.
08-31-2017
Jason, one more question about the Wireless setup. I choose to rebuild
with fresh installations. I h...
08-28-2017
Jason, thanks for the response.The GUI did not display a way to enable
after the upgrade. (or I miss...
08-28-2017
After performing the upgrade, I was unable to access the Wireless Wizard
(GUI)viewed from the CLI sh...
08-23-2017
Good Morning Gary, any chance you could share what your path looks
like?I am having the same problem...
Created by
dmooregfb
in Identity Services Engine (ISE)
08-22-2017
08-22-2017
Hslai, thanks for this:SR 682790420 : PassiveIDDave
Created by
dmooregfb
in Identity Services Engine (ISE)
08-21-2017
08-21-2017
Attachment of the design
Created by
dmooregfb
in Identity Services Engine (ISE)
08-21-2017
08-21-2017
I am seeking any help / advice from anyone who has implemented in a live
corporate environment the u...
Public Statistics
| Date Registered | 11-09-2006 12:34 PM |
| Date Last Visited | 07-20-2019 02:38 PM |
| Total Messages Posted | 67 |
| Total Helpful Votes Received | 36 |
