Hi, I am trying to run an app on a linux guestshell running on 16.6.5 on a 3850. How do I provide internet connectivity to this guestshell ? when I run ifconfig i get below output. How do I nat this ? I am following Cisco live guide and it talks about natting this using a virtualportgroup but I guess that is only supported for routers. Thanks in advanced.   eth0 Link encap:Ethernet HWaddr 52:54:DD:12:95:8C inet addr:192.168.30.2 Bcast:192.168.30.7 Mask:255.255.255.248 inet6 addr: fe80::5054:ddff:fe12:958c%lo/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:17 errors:0 dropped:0 overruns:0 frame:0 TX packets:15 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1434 (1.4 KiB) TX bytes:1238 (1.2 KiB) ... View more

I am able to perform a restconf query to extract IP-SGT mappings for a global vrf using belw   I am now trying to fetch mappings for a particular and need to pass the vrf-name to the get query.  Can't figure out how to construct my Get request. Any help is appreciated. ... View more

I can form simple Restconf query from simple Yang models like below.       I know 'augment' is for extended data models. Can someone explain how can I create a restconf query for below data model ?   ... View more

A customer of mine wants to create bypass filter list under collection filter via API. Eg. Bypassing Suppression via API etc.   Is there an API support for it ? ... View more

Our customer is looking to install Anyconnect NAM since it offer EAP chaining and higher level of security than Windows Native Supplicant however recently it has come to our notice that there are issues with NAM while doing Windows upgrage and Windows patch management where it requires us to uninstall NAM before applying the patch. What is the best practice in implementing Anyconnect NAM ? ... View more

Hi, We are seeing huge number logs on ISE coming from MAC address 00:00:00:00:00:00 from different switches The show authentication session output from the switch is shown below The interface is configured with multi-auth and the phones and machines are working properly in DATA and VOICE domain. Has anyone observed these logs before ? What could be source of these requests ? I do not see any such entry in the mac address table from that interface ... View more

Is it possible for remote access Anyconnect VPN users with non-admin rights to be able to authenticate using machine certificates ? This feature was supposed to be added to Anyconnect 2.3 (mentioned in one of cisco internal documents) however we have tried using Anyconnect 3.1 and  are not able to pass machine certificates for authentication without running Anyconnect  as admin.  It works fine when Anyconnect is run as an admin access. Was this feature never added to any of the Anyconnect versions or are we encountering some bug ? Also is this feature available in Anyconnect 4 ?     ... View more

How can we use DAP in Anyconnect VPN to authorize network access to remote users by validating domain-name in machine certificates against an AD and ISE as a radius server ?   ... View more