About jverdesca

jverdesca · 01-17-2014

Hi All,I'm using an ISE v1.2 to authenticate corporate users connecting to a Corporate SSID with WPA2-Entreprise (802.1x). The client isn't planning to implement a PKI Infraestructure to use EAP-TLS, so they want to authenticate using only PEAP-MS-CH...

jverdesca · 12-05-2013

I'm using an Ace 4710 Appliance deployed in One-Armed mode, using Source NAT to loadbalance HTTP request to a couple of Proxy servers.Everything is working fine, but the thing is that I can't see the Clients IP addresses on Proxy's logs, so I can't k...

jverdesca · 09-05-2013

I have a Cisco ACE 4710 load balancing the traffic to two proxy servers, the configuration is the same since December 2012, but yesterday it stated to show SYNSEEN in the show conn command, and the hosts cannot browse. I think that means that the th...

jverdesca · 12-14-2012

Hi!,I'm having a issue when configuring Cisco ACS 5.2 appliance 1121 to integrate windows 2000 Active Directory as an External Users Database.I'm using an account with administrator privileges on AD (can create computer objects).The ACS register itse...

jverdesca · 01-18-2014

Hi Tarik,Thanks for your answers,I've attached my configured AuthZ rules and AuthZ profile for provisioning,I want the process to be the same for iPhone, Android and Windows.1) Connect to the SSID2) Login using your AD credentials PEAP-MS-CHAP-v23) R...

jverdesca · 01-17-2014

Hi gnijs,I have the same problem but when I set it to Allow Network Access, the ISE cannot get the MAC-Address when redirecting the client to device registration page. Did you have the same behaviour?I've attached the screenshot.Thanks for your help!

jverdesca · 01-17-2014

Hi Kanwal sorry for the late answer!,I had a typo on the policy to insert x-forwarded-for field at ACE,In Squid we set the logs to show the xforward field and remove it to avoid our private IP addresses to be on the header of the packets heading Inte...

jverdesca · 12-05-2013

Hi Kanwal,Thanks for your quick reply,I've already tried this but it didn't work. The problem is that I don't manage the proxy servers so I rely on their skills to see the logs.The Proxies are Squid. Do you know if they need to do something else on t...

jverdesca · 09-10-2013

Hi Cesar,Thank you for your answer,, The issue was solved,We were running an A3 software version, it seems to have a Bug so it doesn't show the NAT commands in the "show run", so when we made the configuration backup we didn't noticed it. The ACE rel...

Member Since	‎12-14-2012 05:58 AM
Date Last Visited	‎08-18-2017 04:01 AM
Posts	12

User Statistics

User Activity

I want the ISE 802.1x to only PEAP-MSCHAP-V2 without provisioning

How to see the Source IP Address of a client using ACE One-armed-mode to load balance HTTP proxy request

TCP SYNSEEN with load balancing Cisco ACE 4710

ACS 5.2 integration with AD windows 2000 advanced SP4

I want the ISE 802.1x to only PEAP-MSCHAP-V2 without provisioni

ISE 1.2 device registration with MAB only, no client provisionin

How to see the Source IP Address of a client using ACE One-armed

How to see the Source IP Address of a client using ACE One-armed

TCP SYNSEEN with load balancing Cisco ACE 4710