About jj27

jj27 · 10-09-2019

ProblemTaking a snapshot of ISE virtual machines is not supported but it still happens occasionally due to administrators taking a snapshot manually or an integrated technology that automatically takes snapshots to back up VMs. When taking a snapsho...

jj27 · 04-19-2017

Where did this document go? The ISE Design and Integration guides page links to https://communities.cisco.com/docs/DOC-68323 but it says the document no longer exists.Thanks.

jj27 · 12-04-2013

Came into a situation where it is needed to recover a lost admin password for the fabric interconnects. Because the password is lost, we are unable to clean shutdown any of the blades and such. Not an ideal situation, but it's what I have to deal wi...

jj27 · 05-20-2013

Hi,I have a scenario where I will be upgrading a UCS environment from 2.0 to 2.1 utilizing direct attached FC storage on the Fabric Interconnects. From my understanding on what I've read is that the default zoning will no longer work and some additi...

jj27 · 03-14-2013

Hi, I'm having a brainfart here on how to make this work. Inbound NAT I split SMTP/HTTPS on the same public IP going to different internal hosts. Outbound, I want any traffic being sent from my inside host for SMTP outbound to anywhere destined for...

jj27 · 10-23-2020

Thanks, this is a very good and helpful write-up. Something also to note is that the http server must be enabled on the controller to process the redirects. It may be on by default, but I had a customer disable it and we spent some time troubleshoot...

jj27 · 11-27-2019

You could probably match using a RegEx in the condition. What is the subnet you are trying to match on?

jj27 · 11-27-2019

What PKI is being used to sign the EAP certificate?If you are using the same PKI to sign the EAP certificate for the nodes worldwide, you can simply export the EAP certificate with private key from one node and then import into the other nodes and ch...

jj27 · 11-27-2019

I assume your VPN client is AnyConnect? It should send over the source IP as you described as an av-pair attribute.I just tested this use-case in my lab and it was successful. The policy looks like this:Attributes sent are:

jj27 · 11-21-2019

As long as the manufacturer has the same OUI (first 6 characters of the MAC address) then you can accomplish it with one policy. Your condition would be Radius:Calling-Station-ID starts with <first 6 characters, example: 00-12-34 or 00:12:34 dependi...

Member Since	‎08-17-2006 12:56 PM
Date Last Visited	‎03-01-2024 12:02 AM
Posts	532
Total Helpful Votes Received	396

User Statistics

User Activity

ISE - Prevent VMware Snapshots

MaaS360 Integration Guide

UCSM Password Recovery

UCS 2.0 to 2.1 Upgrade with Direct Attached Storage

ASA Policy Nat 8.3+

Re: ISE and Catalyst 9800 Series Integration Guide

Re: ISE limit vpn access by client source ip

Re: ISE authentication question for global uses

Re: ISE limit vpn access by client source ip

Re: ISE and MAB