About KevinMuller

KevinMuller · 08-18-2025

Hello!For a customer, i'd like to configure two captive portals respectively tied to two SSID (different usage). However, i'd like Guest Type to be tied to one of the captive portal/SSID, basically : - GuestType "A" can only authenticate to GuestPort...

KevinMuller · 07-06-2020

Hello guys,Quick question about DNA Center 1.3.1.5. Is there any possibility to have a view on the scheduled task (Provision, SWIM, ..) and maybe stop the schedule if required? Even a API call to perform this?This look strange to not have this integr...

KevinMuller · 10-14-2017

Hello guys,I'm planning to do an upgrade of a pair of 6880X in VSS (no IA) with a major gap between releases : 15.1(2) to 15.4(1). I understand that ISSU process is not possible, so do you know any other way of doing the upgrade to limit the network ...

KevinMuller · 08-17-2016

Hello there!I have a question regarding upgrade path on Cisco ASA 5555.I have an two ASA 5555 in Active/Standby running version 9.1(5) and I would like to upgrade them to 9.4(2), so I took a look at this document : http://www.cisco.com/c/en/us/td/doc...

KevinMuller · 04-16-2015

Hello guys,I'm working on a routing lab to set up PBR between two sites with line protocol and ip sla tracking.What I like to do exactly, is to track the status of an interface (a loopback interface that is used just to force a path instead of anothe...

KevinMuller · 08-20-2025

Thanks for trying to help on this topic

KevinMuller · 08-20-2025

dACL is not a thing as SSID are mapped to different subnets. Once the Guest is authenticated, I just send an Access-Accept without any other attributes."Even if all SSID guest mac in one internal identity store' still when guest re-auth ISE can match...

KevinMuller · 08-20-2025

Yes, review the thread/printscreen. And this is something that is usual to do that for "Permanent Guest" that's why i'm mentionning it (i.e : https://documentation.meraki.com/MR/Encryption_and_Authentication/CWA_-_Central_Web_Authentication_with_Cisc...

KevinMuller · 08-20-2025

To clarify my statement : I'm not 100% sure we can match on the User Identity Groups instead of Endpoint Identity Group in authz conditions. As the RADIUS authentication is MAC based, the lookup should be performed on the Internal Endpoints identity ...

KevinMuller · 08-20-2025

You cannot checks on these conditions are for CWA you perform Host Lookup type of authentication. ISE performs the authentication process on the guest portal "internally", it doesn't go through the RADIUS Policy Sets for this. Only Endpoint ID Groups...

Member Since	‎03-10-2014 07:51 AM
Date Last Visited	‎11-05-2025 04:33 AM
Posts	51
Total Helpful Votes Received	9

User Statistics

User Activity

Restrict GuestType to specific portal/SSID

DNAC monitor/stop scheduled tasks

Major upgrade on 6880 VSS

Upgrade path from 9.1(5) to 9.4(2)

Line-protocol and ip sla tracking with PBR

Re: Restrict GuestType to specific portal/SSID

Re: Restrict GuestType to specific portal/SSID

Re: Restrict GuestType to specific portal/SSID

Re: Restrict GuestType to specific portal/SSID

Re: Restrict GuestType to specific portal/SSID