About Toivo Voll

Toivo Voll · 12-05-2016

I'm trying to find documentation or instructions on how to set up a 8821 wireless handset for EAP-TLS authentication. I have the certificate, but I can't seem to find a documented way to get the certificate onto the phone. The "Cisco Wireless IP Phon...

Toivo Voll · 10-13-2016

We're trying to use AD group membership as part of authentication rules for the TACACS+ policy sets. However, while we can write such a rule (<our AD>:ExternalGroups EQUALS <AD group>), it immediately replaces the AD group name with the SID, and the ...

Toivo Voll · 08-17-2016

We are doing wireless authentication, and are having some trouble with legacy clients. Can anyone offer advice, or links to pertinent documentation? As far as I can tell this really has no relevant wireless problem, the issue is in the 802.1X / RADIU...

Toivo Voll · 07-07-2016

We want to find a better way to configure 7925g phones (certificates, wireless profiles etc.) and the deployment guide suggests connecting them to a PC via USB, and then creating a dummy serial network interface to reach the phone's web server is the...

Toivo Voll · 06-06-2016

We have an ISE 2.0.1 install, and are running into an issue with cert chaining. Specifically, for the web interface, ISE only provides the system cert, and not the rest of the cert chain. We have an enterprise CA and associated root cert, and then an...

Toivo Voll · 10-17-2017

I did. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg10793 Known Fixed Releases: 8.7(1.41) 8.6(1.127) 8.5(107.57) 8.5(103.232) 8.3(134.2) 8.3(130.233) 8.2(163.6) When I go to CCO: Latest 8.3.130.0(ED)8.0.150.0(ED)8.2.161.0(ED)8.5.103.0(...

Toivo Voll · 10-16-2017

Yeah, I'm also curious how it was "fixed" and whether going to the "fixed" version will cause issues with client compatibility. I also don't see any of the fixed" releases as available for download from CCO.

Toivo Voll · 07-14-2017

Nope. It gets even worse with the 8821s. There we gave up, and did the weird workaround where the docking station with an old Apple USB-Ethernet dongle allows the phones to get an IP for initial setup.

Toivo Voll · 12-14-2016

Thank you for the reply -- that guide was indeed helpful!

Toivo Voll · 12-06-2016

(While trying to figure this out, I also ran into some interesting bugs, CSCuy70197 and CSCuw85598, worth looking at for others who are trying to get this to work.)

Member Since	‎05-12-2014 08:49 AM
Date Last Visited	‎10-30-2017 09:47 AM
Posts	71
Total Helpful Votes Received	41

User Statistics

User Activity

8821 EAP-TLS Setup?

AD Groups in ISE 2.1.0.474 PL1 TACACS+ Policy Sets?

802.1X EAP Protocol Negotiation -- LEAP, PEAP, TLS?

Configuring 7925G on Windows 10 or Mac?

ISE 2.0 TLS Cert Chaining?

Re: CSCvg10793%20-%20Key%20Reinstallation%20attacks%20against%20WPA%20protocol

Re: CSCvg10793%20-%20Key%20Reinstallation%20attacks%20against%20WPA%20protocol

Nope.

Thank you for the reply --

(While trying to figure this