Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About robertbrink1
Stats
Member since
10-09-2014
35
Posts
17
Helpful
1
Solution
Created by
robertbrink1
in Policy and Access
in Policy and Access
12-15-2017
12:42 AM
12-15-2017
12:42 AM
Hi,
Has anyone deployed wireless guest access with dual stack? With Ipv4 the ISE Policy result refers to an ipv4 ACL and an url for redirect portal. How can this be done with dual stack? Because we can only refer to one ACL on ISE in one result.
Right now ipv4 will be blocked by the ACL, but ipv6 traffic flows as normal - so a guest can browse the internet on ipv6 without authenticating.
I havent found any documentation for dualstack guest network yet.
... View more
Labels:
Re: IOS-XE 3.6.6e - MC / MA with guest ...
in Other Wireless - Mobility Subjects
12-05-2017
02:56 AM
12-05-2017
02:56 AM
I see now that Cisco has done some changes from 3.6.3 that maybe is the reason. Have to read up about this then.
edit: not relevant. just a new ACL that is not in use by me.
edit2: It seems to be related to aireos software upgrade, but I cant figure out why!
... View more
11-01-2017
04:24 AM
Hi,
Can you please share your workaround. I'm facing the same challenge.
... View more
Created by
robertbrink1
in Policy and Access
in Policy and Access
11-01-2017
04:22 AM
11-01-2017
04:22 AM
Hi,
Did you ever get a working workaround for restrictng access to my device portal?
... View more
Created by
robertbrink1
in Policy and Access
in Policy and Access
06-12-2017
01:14 PM
06-12-2017
01:14 PM
Hi,
I've a strange problem regarding two different deployments of ISE 2.1.
The first deployement is a fresh ISE 2.1 install with patch 3, and the second deployment has been upgraded from ISE 1.3 patch 7 to ISE 2.1 patch 3.
The fresh deployement has the option to select "Chrome OS All" under Native supplicant profile Operating systems. But on the other deployement this option is not there. Why?!
Both deployments has the same license level and the same posture update url feed.
Any suggestions?
... View more
Labels:
04-06-2017
02:05 AM
Hi,
Our setup is as the following:
Local WLC on location (3650 ios-xe with 3.6.5) with guest wlan anchored up to a 5508 (8.3.102) located offsite. Cisco ISE runs 2.1 patch 3.
Windows and mobile clients gets the CWA with no errors and can authenticate to the guest network. But the Mac OSX (macbook) users often get "400 Bad Request" when they are redirected to the CWA on ISE.
On our guest anchor the checkbox is checked but no serveres are defined since we dont have any here. On the local wlc we use accounting-list. So we have to remove the checkbox on the anchor ssid although there are no servers listed?
... View more
01-09-2017
02:33 AM
I've also seen this problem a few times. (on 3.6.1 and 3.6.2)
Since I am not able to run out on different locations and pull the power off and on, we use snmpset to reload the switch. "snmp-server system shutdown" has to be enabled to get this working. You can turn this on with the web gui cli if your switch refuses connection on telnet/ssh. :)
clear line and clear tcp tcp does not work.
Tool used: https://www.snmpsoft.com/cmd-tools/snmp-set/
Doc: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/26010-faq-snmpios.html#qa4
snmpset.exe -r:IP -c:"RW-COMMUNITY" -o:.1.3.6.1.4.1.9.2.9.9.0 -tp:int -val:2
... View more
12-08-2016
11:27 AM
Found this tread by googling... But I was sad to see that there were no answers..:/
... View more
Created by
robertbrink1
in Cisco Bug Discussions
in Cisco Bug Discussions
10-15-2015
12:58 PM
10-15-2015
12:58 PM
Hi, We are experiencing the same problem as described in the bug, and the workaround does not solve the problem for us. Does anyone have any other tips regarding this issue? Running ISE 1.3 patch 3. Best regards Robert
... View more
Labels:
I've now tested with
in Wireless Security and Network Management
06-18-2015
12:14 AM
06-18-2015
12:14 AM
I've now tested with different browsers and settings and found out that both IE and Firefox does not input the default value in the duration field. Chrome on the other hand is able to auto fill the correct duration. I've made a guest type with 8 hour access, and set the default value to 8. IE & Firefox: Default value is set to 1 hour. If I change the value to something other than 1 and I tab to the next field, the value chages to 1 again. Chrome: Default value is set to 8 hours, mostly. But sometimes the value is set to 5 or 7. When I change the value to 8, and use tab to go to the next field, the value does not change. edit: I am running ISE 1.3 patch 3. But this problem was also in patch 2.
... View more
06-02-2015
03:47 AM
I see what you mean, but I cant get it to work like that. I've created a guest type that can register max 3 devices, linked this guest type to a sponsor group that is again linked to a AD-group. On the settings pane for device management I've set a max of 10 devices. When I log in to the My Device portal with a user from AD that should be "linked" up to the new guest type, it can register 10 devices, not 3.
... View more
Created by
robertbrink1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-12-2015
12:26 AM
05-12-2015
12:26 AM
Hi, I've upgraded several 3650 controllers to 03.07.01E and noticed that after a reboot the radios are globally set as "down". This is related to both 2.4 and 5ghz. 3650#sh ap dot11 5ghz su AP Name MAC Address Slot Admin State Oper State Channel Width TxPwr ------------------------------------------------------------------------------------------------------------------ APd46d.50f9.XXXX 74a0.2fcc.XXXX 1 Enabled Down 48* 20 3(*) APa89d.217f.XXXX 84b8.024f.XXXX 1 Enabled Down 36* 20 5(*) APa89d.2187.XXXX 84b8.0257.XXXX 1 Enabled Down 44* 20 5(*) AP64f6.9db2.XXXX 84b8.026c.XXXX 1 Enabled Down 60* 20 1(*) AP84b8.0224.XXXX 84b8.02bc.XXXX 1 Enabled Down 52* 20 2(*) sh wlan sum reports that every SSID is UP. Country code is correct. AP2702i and 3502i are tested. To "fix" this issue I've to run "no ap dot11 24ghz shutdown" and " no ap dot11 5ghz shutdown" in config mode after each reload. I cant find a bug regarding this issue. Anyone else that has this problem? Thanks! Edit: I found this https://tools.cisco.com/bugsearch/bug/CSCut44062 related to 4500 switches.
... View more
Created by
robertbrink1
in Policy and Access
in Policy and Access
04-24-2015
12:51 AM
04-24-2015
12:51 AM
Hi, I am trying to figure out a way to let "special users" be able to register more than x-devices. In my lab I've restricted employees to 3 devices, but in some cases these "special users" must be able to register more that that. Is this possible without giving them access to the ISE-management? With "registration" I'm think of both onboarding and pre-registration in the My device portal. Say that AD group XYZ (normal users) can register 3 devices, and group ABC can register 20. If this is not possible or no easy workaround available, can it be a feature request? And how can I submit this as a feature request?
... View more
Labels:
04-23-2015
04:38 AM
In my case it doesnt work in the lab, standalone. We havent rolled out the complete config to our distributed deployment. So here I dont know if it works or not.
... View more
Created by
robertbrink1
in Identity Services Engine (ISE)
09-18-2019
09-18-2019
Thanks for the feedback.I don't think that 2.6 is that far away from
becoming the recommended releas...
Created by
robertbrink1
in Identity Services Engine (ISE)
09-17-2019
09-17-2019
Hi,I've read a lot of best practices regarding the upgrade method for
ISE and I think the best optio...
Created by
robertbrink1
in Policy and Access
12-15-2017
12-15-2017
Hi, Has anyone deployed wireless guest access with dual stack? With Ipv4
the ISE Policy result refer...
12-05-2017
I see now that Cisco has done some changes from 3.6.3 that maybe is the
reason. Have to read up abou...
Created by
robertbrink1
in Policy and Access
11-01-2017
11-01-2017
Hi, Did you ever get a working workaround for restrictng access to my
device portal?
Created by
robertbrink1
in Identity Services Engine (ISE)
06-22-2017
06-22-2017
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve94186
Created by
robertbrink1
in Policy and Access
06-12-2017
06-12-2017
Hi, I've a strange problem regarding two different deployments of ISE
2.1. The first deployement is ...
Created by
robertbrink1
in Identity Services Engine (ISE)
06-12-2017
06-12-2017
Hi,I've a strange problem regarding two different deployments of ISE
2.1. The first deployement is a...
04-06-2017
Hi, Our setup is as the following: Local WLC on location (3650 ios-xe
with 3.6.5) with guest wlan an...
01-09-2017
I've also seen this problem a few times. (on 3.6.1 and 3.6.2) Since I am
not able to run out on diff...
10-15-2015
Hi,We are experiencing the same problem as described in the bug, and the
workaround does not solve t...
Public Statistics
| Date Registered | 10-09-2014 11:16 AM |
| Date Last Visited | 09-18-2019 01:01 AM |
| Total Messages Posted | 35 |
| Total Helpful Votes Received | 17 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 1 | |
| 1 | |
| 5 | |
| 5 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 1 | |
| 1 | |
| 5 | |
| 5 |
