Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jacob.fredriksson
08-30-2019
Stats
Member since
06-10-2014
52
Posts
62
Helpful
6
Solutions
Created by
jacob.fredrikss
in Policy and Access
in Policy and Access
04-09-2019
11:10 PM
04-09-2019
11:10 PM
We are on ISE 2.2 and using the client provisioning package called MacOsXSPWizard 2.3.0.43 and it is working for us for Mojave Macbooks. Make sure to update Cisco profiling feed under Work Centers > Profiler > Feeds. Press Test Feed Service and then run Update Now to get the latest data. Make sure to update the Posture service and confirm that the Cisco supported OS version is AT LEAST 46.0.0.0 Navigate to Administration > System > Settings Posture > Updates and look at the bottom of the page. Do the update if necessary, for us it didn't work to do online so we have to download the update file from Cisco and to an offline update manually.
... View more
Created by
jacob.fredrikss
in VPN and AnyConnect
03-08-2019
12:35 AM
03-08-2019
12:35 AM
Hello Oliver! Which AnyConnect version fixed the issue for you? We are also experiencing this problem.
... View more
Created by
jacob.fredrikss
in Policy and Access
11-07-2018
11:02 PM
11-07-2018
11:02 PM
That did it! Apparently the automatic update had stopped working and I couldn't even run a manual one due to ISE complaining about the feed not being reachable. I has to download the Posture Update manually and then upload it to ISE. After installing the Posture Update I went from Supported OS version 43.0.0.0 to 46.0.0.0.
Thanks for the help!
... View more
Created by
jacob.fredrikss
in Policy and Access
10-31-2018
05:56 AM
10-31-2018
05:56 AM
Alright, good to know :)
It seems the issue now is that the Mojave Macbooks are denied from starting the self-registration process...
Please see attached image. Any ideas why?
... View more
Created by
jacob.fredrikss
in Policy and Access
10-30-2018
11:40 PM
10-30-2018
11:40 PM
I am having similar issues with ISE 2.2 on patch 4. Our Mac admins are saying they cannot register Macbooks running Mojave 10.14 using the ISE BYOD self registration.
I ran a manual feed update today but I cannot see Mojave or MacOS 10.14 appearing anywhere in ISE.
The feed update gave our ISE the SPW called MacOsXSPWizard version 2.3.0.43. Should this one support Mojave/10.14?
Also in our Client Provisioning Policy I cannot see Mojave/10.14 under the Operating Systems (see attached image), should it work anyway?
... View more
Created by
jacob.fredrikss
in Switching
09-26-2018
06:38 AM
09-26-2018
06:38 AM
The only solution we have considered is that if you could make a second VSL-portchannel with the 40Gbit-links and have them connected at the same time and they remove the 10Gbit links once everything looks good with show commands. However I cannot find any documentation saying that this is supported (or unsupported for that matter).
... View more
Created by
jacob.fredrikss
in Switching
09-26-2018
06:15 AM
09-26-2018
06:15 AM
Since the VSL-link is kind of a port-channel I assumed you couldn't mix 10 Gbit ports with 40 Gbit ports. Normally in port-channels all the physical ports have to have the same speed/bandwidth.
... View more
Created by
jacob.fredrikss
in Switching
09-26-2018
05:36 AM
09-26-2018
05:36 AM
Hi everyone!
We have 2 x Catalyst 6807 switches in a Quad-Supervisor VSS setup in which one 10 Gigabit link from each supervisor make current VSL-link between the switches. So in total we have 20 Gbit between the two switches.
The Sup6T supervisors in each 6807 has 2 x 40 Gbit ports. This means we have 4 x 40Gbit ports in each switch to use. We are interested in using these 40Gbit ports to upgrade the VSL-link from 20 Gbit to 80 Gbit.
Is there a way to do this without any downtime or breaking the current VSS or VSL-link?
Could we set up new VSL port-channels to deal with the 40Gbit ports from each side, connect them together while the old 10Gbit links are still up and running? And then remove the 10 Gbit cabling if everything looks okay in CLI.
Any tips?
... View more
Labels:
Created by
jacob.fredrikss
in Network Management
07-15-2018
02:52 AM
07-15-2018
02:52 AM
Any idea of which Prime version supports the 2100-series then? I have added the firewalls (which are running ASA) to Prime and the credentials test to log into ASA checks out but I still get "Unsupported Cisco Device" in Prime after a couple of minutes.
... View more
Created by
jacob.fredrikss
in Network Management
07-13-2018
02:21 AM
07-13-2018
02:21 AM
Hello everyone,
I am trying to add a FPR2120-ASA-K9 to Prime Infrastructure but it tells me the model is not supported ("Unsupported Cisco Device"). I am running Prime 3.1.7 with device pack 16 installed. I haven't been able to find any of the new FPR-models in the device pack supported model list.
Is there support for the FPR2120-ASA-K9 in the newer versions of Prime (3.2---3.3---3.4) or am I out of luck? I've been looking around the release notes trying to find out if the model is supported on those versions but so far I haven't been able to find anything.
Please note that this is a firewall running the ASA image and not FTD.
... View more
Labels:
02-18-2018
03:48 AM
Hi vergil!
In Cisco ISE, some licenses are perpetual (they are yours forever) and some are subscription-based (you pay by the year). Every level of license unlocks new features for your ISE deployment.
Base: Perpetual
Plus: 1/3/5 years subscription
Apex: 1/3/5 years subscription
Device Admin License (unlocks TACACS+): Perpetual
Licensing is based around your ISE deployment as a whole. For example, the licensing remains the same regardless of how big your deployment is. Every ISE node in your deployement shares the licenses between them. This allows your ISE deployment to grow without having to deal with licensing trouble along the way. All licenses are managed in the Primary Administration Node (PAN).
I am not sure but I think subscription-based license start their "timer" when you first activate them on your ISE deployment, not at the day of purchase.
... View more
Created by
jacob.fredrikss
in Policy and Access
11-23-2017
10:03 AM
11-23-2017
10:03 AM
I think it's referenced under any of the Sponsor Groups.
... View more
Created by
jacob.fredrikss
in Policy and Access
11-16-2017
08:53 AM
11-16-2017
08:53 AM
Did the problem appear just now? Maybe Apple has goofed up their trusted store on up-to-date iOS devices. Do you have any older iOS devices you could try accessing the portal on?
... View more
Created by
jacob.fredrikss
in Policy and Access
11-16-2017
08:50 AM
11-16-2017
08:50 AM
Okay, that shouldn't be a problem..
Are you sure the domains in the certificate "covers" the hostname of your ISE nodes?
... View more
Created by
jacob.fredrikss
in VPN and AnyConnect
11-16-2017
08:46 AM
11-16-2017
08:46 AM
I finally managed to achieve what I wanted to do.
By disabling Always-On in the VPN-profil and just sticking with Automatic VPN Policy is seems to work great now. If for some reason the automatic VPN cannot be established either due to ISE, AD, ASA being down or if not all certificates can be found on the computer, AnyConnect will now no longer lock down all network adapters.
... View more
08-25-2019
Thank you Arne for taking a look at this.I've been doing lookups from
inside ISE on several machines...
08-22-2019
Hey everyone, I ran into a weird issue yesterday on a ISE 2.4 patch 8
deployment in which ISE is (fo...
Created by
jacob.fredriksson
in Policy and Access
04-09-2019
04-09-2019
We are on ISE 2.2 and using the client provisioning package called
MacOsXSPWizard 2.3.0.43 and it is...
Created by
jacob.fredriksson
in VPN and AnyConnect
03-08-2019
03-08-2019
Hello Oliver!Which AnyConnect version fixed the issue for you? We are
also experiencing this problem...
Created by
jacob.fredriksson
in Policy and Access
11-07-2018
11-07-2018
That did it! Apparently the automatic update had stopped working and I
couldn't even run a manual on...
Created by
jacob.fredriksson
in Policy and Access
10-31-2018
10-31-2018
Alright, good to know :) It seems the issue now is that the Mojave
Macbooks are denied from starting...
Created by
jacob.fredriksson
in Policy and Access
10-30-2018
10-30-2018
I am having similar issues with ISE 2.2 on patch 4. Our Mac admins are
saying they cannot register M...
Created by
jacob.fredriksson
in Switching
09-26-2018
09-26-2018
The only solution we have considered is that if you could make a second
VSL-portchannel with the 40G...
Created by
jacob.fredriksson
in Switching
09-26-2018
09-26-2018
Since the VSL-link is kind of a port-channel I assumed you couldn't mix
10 Gbit ports with 40 Gbit p...
Created by
jacob.fredriksson
in Switching
09-26-2018
09-26-2018
Hi everyone! We have 2 x Catalyst 6807 switches in a Quad-Supervisor VSS
setup in which one 10 Gigab...
Created by
jacob.fredriksson
in Network Management
07-15-2018
07-15-2018
Any idea of which Prime version supports the 2100-series then? I have
added the firewalls (which are...
Created by
jacob.fredriksson
in Network Management
07-13-2018
07-13-2018
Hello everyone, I am trying to add a FPR2120-ASA-K9 to Prime
Infrastructure but it tells me the mode...
02-18-2018
Hi vergil! In Cisco ISE, some licenses are perpetual (they are yours
forever) and some are subscript...
Created by
jacob.fredriksson
in Policy and Access
11-23-2017
11-23-2017
I think it's referenced under any of the Sponsor Groups.
Created by
jacob.fredriksson
in Policy and Access
11-16-2017
11-16-2017
Did the problem appear just now? Maybe Apple has goofed up their trusted
store on up-to-date iOS dev...
Public Statistics
| Date Registered | 06-10-2014 05:27 AM |
| Date Last Visited | 08-30-2019 12:03 AM |
| Total Messages Posted | 52 |
| Total Helpful Votes Received | 62 |
Helpful Votes Given To
.jpg "Hall of Fame Community Legend"){kind=icon}
Helpful Votes From
