About Mohammed al Baqari

Mohammed al Baqari · 05-09-2023

Hi, We had a deployment of centralised WLC (earlier 3504) with flexconnect configured for remote sites (centralized auth, local switching, ISE CWA. ISE, WAPs and clients are on same LAN). These sites are connected to the controller using satellite li...

Mohammed al Baqari · 02-08-2021

Powering Once IP phone is connected to PoE Ethernet Switch, it will get the required power through Cisco-proprietary PoE or 802.3af PoE. Configuring VLAN In this phase, the phone will be waiting for the response of CDP broadcast to get the voice ...

Mohammed al Baqari · 02-07-2021

To verify the status of RADIUS server from NAD, use the command show aaa server 4507#sh aaa servers RADIUS: id 3, priority 1, host 10.10.14.20, auth-port 1812, acct-port 1813 State: current UP, duration 10862s, previous duration 0s Dea...

Mohammed al Baqari · 02-07-2021

LAB: FMC 6.5 Integrated with ISE 2.4 using PxGrid v1 From FMC CLI, verify ISE integration status using the command root@vFPMC:/etc/rc.d# cat /var/sf/run/adi-health $status = { 'ADI' => 'UP', 'Realm5(AD)_TESTLAB.COM' => 'UP', 'Real...

Mohammed al Baqari · 07-07-2019

This is a sample configuration for IKEv2 DMVPN utilizing VRF and EIGRP routing. Very common deployment for multi-tanent deployment. Topology Configuration R1 (HUB) …………………………………………………………………………………………………………………………………………… vrf definition dmv...

Mohammed al Baqari · 05-09-2023

Many thx Flavio. With regards to local authentication, I read this one but I am using MAB for guest portal provided by ISE. The document is describing dot1x only. Is MAB supported using local authentication as well? If there is any document will be g...

Mohammed al Baqari · 05-04-2023

Hi,Go to the smart portal and check the last time it was connected to see ifit's actually not authorized or not connected at all. From there, you canfind the path forward, i.e. troubleshoot connectivity or find the reasonfor authorization failure.***...

Mohammed al Baqari · 05-04-2023

Thx mate. I thought I saw VTI (probably confused with different post). I will edit mine.

Mohammed al Baqari · 05-04-2023

Hi, The problem in your case that users are not downloaded from FMC to FTD hence it returned user 9999999 in the identity lookup. FTD isn't able to send the events to FMC with user identity. So we need to troubleshoot that part. Cross check again th...

Mohammed al Baqari · 05-04-2023

Hi, I edited my post as I thought its VTI instead of crypto map. Just do the inside pcap as suggested the guys. **** please remember to rate useful posts

Member Since	‎02-14-2012 11:21 AM
Date Last Visited	‎05-13-2023 03:38 PM
Posts	4,982
Total Helpful Votes Received	6295

User Statistics

User Activity

Flexconnect on Slow Links

IP Phone Boot Sequence

Troubleshoot Dot1x and Radius in IOS and IOS-XE

Debugging FTD Identity-based Policy

VRF-Aware IKEv2 DMVPN (+ iVRF/fVRF + EIGRP)

Re: Flexconnect on Slow Links

Re: Authorization Out of Complaince on Smart licensing page

Re: Traffic not passing |#pkts encaps: 0, #pkts encrypt

Re: FMC passive identity - user not found in the connection event log

Re: Traffic not passing |#pkts encaps: 0, #pkts encrypt