About Roman Rodichev

Roman Rodichev · 03-06-2024

Hello, Does anyone know if there's a way to configure Cisco Anyconnect for SSO where Windows login password credentials are automatically used by Anyconnect for authentication? Thank you

Roman Rodichev · 09-20-2021

I am looking for a document that ISE 3.x *default cisco profiling policies* can RADIUS profile from IOS Device Sensor DHCP, LLDP and CDP attributes. Does such thing exist? For example, there are different/inconsistent attributes in different CLI conf...

Roman Rodichev · 07-06-2021

When doing show run on 17.2 IOS-XE vmanage controlled ISR 4300, you can see that NAT ALG is disabled for all protocols, including FTP. For example, ACTIVE FTP needs this to be enabled. For the life of me, I can't find any documentation or any templat...

Roman Rodichev · 07-03-2021

Just to be clear, this question is not about integrating ASA Anyconnect authentication directly with Microsoft Azure MFA. The goal is for users to see only Duo screens. I use SAML for Anyconnect auth on ASA with Duo Cloud IdP. Instead of using on-pre...

Roman Rodichev · 06-30-2021

Is it correct that DHCP snooping is used by IPDT feature specifically for having IP address information in the RADIUS access session, but not for Device Sensor based dhcp profiling (RADIUS Accounting based)? In other words, is switch DHCP snooping re...

Roman Rodichev · 10-19-2023

Nice! I assume that was some manual configuration in CLI? Could you share just a small excerpt of what you changed to make it work?

Roman Rodichev · 10-19-2023

Hello Sir, could you please help me understand a proper use of affinity-id? We have a fabric in each location, and then a Guest_VN Anchor Fabric in two data centers, one BN/CP in one DC connected to Inet, and another BN/CP in the second DC connected ...

Roman Rodichev · 10-17-2023

Found my answer from TAC, you basically configure two service filters, one with all FE switches as Source, and another with all FE switches as Query. Simple.

Roman Rodichev · 10-17-2023

Hello, did you figure out how to do bidirectional source+query?

Roman Rodichev · 10-11-2023

Jedolphi, I'm also interested in a L2VN stretch between fabrics. We know how to do L3VN anchoring between sites, but wondering how to do this with L2VN. You mentioned manipulating L2VN object? Is this something that can be done from CLI? I'm assuming...

Member Since	‎08-06-2009 06:51 PM
Date Last Visited	‎04-29-2025 11:19 AM
Posts	1,144
Total Helpful Votes Received	421

User Statistics

User Activity

Single sign-on (SSO) in Windows with Anyconnect

Document with DHCP, LLDP and CDP attributes that ISE can profile on?

Where to configure IOS-XE "ip nat service ftp" (FTP ALG) in vmanage?

AnyConnect SAML authentication via Duo SAML and Azure AD SAML

DCHP Snooping on IOS XE switches for IPDT and Device Sensor features

Re: Cisco SDA: L2 VN

Re: Use of SD Access Affinity-ID

Re: Wide Area Bonjour - SDG Agent as both Source and Query

Re: Wide Area Bonjour - SDG Agent as both Source and Query

Re: Cisco SDA: L2 VN