Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dirkmelvin
Stats
Member since
06-29-2007
136
Posts
18
Helpful
1
Solution
Created by
dirkmelvin
in Network Security
in Network Security
01-20-2018
10:23 AM
01-20-2018
10:23 AM
Ok, so after running the 'clear wccp config' command, and waiting a couple of minutes it did actually clear out.
... View more
Created by
dirkmelvin
in Network Security
in Network Security
01-20-2018
09:44 AM
01-20-2018
09:44 AM
Running 9.9(1) here and I can't get the WCCP config to remove/change.
Tried ASDM and CLI/SSH
Funny thing is, I have been doing this all morning, and the moment that I sort of confirmed with Forcepoint the commands I have now are correct, is when it stops letting me modify.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-30-2017
09:57 AM
11-30-2017
09:57 AM
I'm not even getting to the point of where that bug relates. I haven't done ANY setup through the wizard at all....can't get far enough to try.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-30-2017
09:54 AM
11-30-2017
09:54 AM
So are we saying this is a known issue that it doesn't work with 8.5.x WLCs? I haven't read docs yet, but have they patched the WPA2 issues in 8.3.x code?
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-30-2017
09:52 AM
11-30-2017
09:52 AM
Let me look back through my notes to see if he sent them in email....I have a feeling it was just the session chat though. Rookie mistake, should have bookmarked them immediately.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-30-2017
07:20 AM
11-30-2017
07:20 AM
Our WLCs are 2504, running v8.5.105.0
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-30-2017
07:18 AM
11-30-2017
07:18 AM
My case# 683415389 But it is closed now, as he gave me the docs for manually doing this. Guess they aren't putting a lot of resource into troubleshooting since it is still in BETA?
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-29-2017
06:55 AM
11-29-2017
06:55 AM
My install is a single instance for now. It doesn't matter which wireless wizard I try to run, they all stall at the same spot. I spoke with TAC, and they don't understand the issue so far either. The last I spoke with TAC; the tech was supposedly escalating, but sent me documents on how to do the setups manually. So I have done that for the guest wifi for the time being, but would REALLY like to have the wizard working for other setups.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-09-2017
06:44 AM
11-09-2017
06:44 AM
I have rebooted the server, I have restarted those services, I have even reset the wireless setup. No, I am on the same network as the ISE server no firewall involved.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-09-2017
06:21 AM
11-09-2017
06:21 AM
ISE PROCESS NAME STATE PROCESS ID -------------------------------------------------------------------- Database Listener running 3469 Database Server running 91 PROCESSES Application Server running 9424 Profiler Database running 5773 ISE Indexing Engine running 10929 AD Connector running 16319 M&T Session Database running 5675 M&T Log Collector running 9566 M&T Log Processor running 9477 Certificate Authority Service running 12472 EST Service running 19797 SXP Engine Service disabled Docker Daemon running 11624 TC-NAC Service disabled Wifi Setup Helper Container running 12161 Wifi Setup Helper Vault running 42 Wifi Setup Helper MongoDB running 15 Wifi Setup Helper Web Server running 245 Wifi Setup Helper Auth Service running 127 Wifi Setup Helper Main Service running 167 ...skipping one line pxGrid Infrastructure Service disabled pxGrid Publisher Subscriber Service disabled pxGrid Connection Manager disabled pxGrid Controller disabled PassiveID WMI Service running 12987 PassiveID Syslog Service running 13676 PassiveID API Service running 14051 PassiveID Agent Service running 14643 PassiveID Endpoint Service running 15171 PassiveID SPAN Service running 16003 DHCP Server (dhcpd) disabled DNS Server (named) disabled 6 vCPU 16G Static 500GB Drive I have not reached out to TAC yet, haven't had a lot of time for troubleshooting, but that will eventually be an option.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-09-2017
05:52 AM
11-09-2017
05:52 AM
I did turn on the service. And it is running, and this is my only ISE server at this point. Still every time I only get to the one spot and it hangs. I have let it sit there for an hour.
... View more
Created by
dirkmelvin
in Network Access Control
in Network Access Control
11-08-2017
04:17 PM
11-08-2017
04:17 PM
ISE 2.3p1(post 10-18-2017 update) VM, running on HyperV 2012R2 I know the wireless wizard is beta. But it doesn't matter so far what wireless wizard I try to run, they all get to the "Wireless LAN Controller" screen...and just sits there spinning at 'loading..." on what I am assuming is step 1? I tried this before the p1 update, I tried it on the original p1 update, and on the corrected p1 update. All the same result.
... View more
Labels:
09-27-2017
12:20 PM
I haven't read through it yet, but part of the problem with these unauthorized Apple clients, is that they don't have NAC Agent installed. All of our Windows clients do. So would this ISE configuration mentioned aboive have any affect, woudln't Anyconnect just ignore anything ISE said without the NAC agent installed? I know there is also something in (or a part of) Anyconnect that can do the ISE posturing instead of using NAC Agent, but I haven't made it that far in configuration of ISE (I'm also in the throws of rebuilding ISE to v2.3 from our current 1.4).
... View more
09-27-2017
07:53 AM
Is there a configuration/setting on the ASA so that I can stop Apple users from connecting to the VPN? I have some contractors that have gotten clever and are bypassing my posture rules (ISE) using their Apple Laptops. We are a Windows shop and prefer to keep it that way, at least for now. I am limited in knowledge of Apple devices in general, and just don't have the time nor the staff to have this additional 'support' burden.
... View more
Labels:
07-18-2017
10:41 AM
Statements/Issues/Questions like this are unfortunately VERY common. I think the largest cause is how Cisco 'plays it close to the vest' on the more detailed information. And that is probably because they don't want just anyone to jump into potentially VERY important (and business critical) configurations and cause even larger problems potentially for everyone. (or maybe they just want the additional income from requiring anyone that wants to know how to work on these things to get a certification).
At any rate, I promise configuring ISE from scratch is very doable....IF you have time to spend and an environment that will allow you to learn. I started out with ISE 1.1, the company we worked with to get it implemented assigned us a Cisco expert that seemed almost as green as me when it came to how to actually configure ISE for our setup. I feel that I pretty much learn it all on the fly during that implementation and almost on my own. I did not have time to do so, nor did we have an environment that allowed me the luxury of 'playing to learn'. My company wanted this implemented and did not give me 'warm and fuzzies' for any delays or issues we had.
We are now running on ISE v1.4u? born from this original implementation. I actually have ISE v2.2 running on our HyperV cluster (but having network related issues specific to talking to ISE), because we implemented an MDM solution that required v2.2 to work properly. So now I also need to convert/migrate our rules from 1.4 to our 2.2 (and quickly, I only have 30days left of our 90 trail).
It is NOT easy, but if you have the ability, I suggest diving head first in getting to know it. Read up, read older version docs, to get a feel of how operations have changed and how the product has improved (or got worse). Read through all the forums you can find, I still feel like I have a LOT to learn and I have been working with ISE for 5 years now.
You can go back and look at some of my posts here to see some of my struggles.
... View more
01-20-2018
Ok, so after running the 'clear wccp config' command, and waiting a
couple of minutes it did actuall...
01-20-2018
Running 9.9(1) here and I can't get the WCCP config to remove/change.
Tried ASDM and CLI/SSH Funny t...
Created by
dirkmelvin
in Network Access Control
11-30-2017
11-30-2017
I'm not even getting to the point of where that bug relates.I haven't
done ANY setup through the wiz...
Created by
dirkmelvin
in Network Access Control
11-30-2017
11-30-2017
So are we saying this is a known issue that it doesn't work with 8.5.x
WLCs? I haven't read docs yet...
Created by
dirkmelvin
in Network Access Control
11-30-2017
11-30-2017
Let me look back through my notes to see if he sent them in email....I
have a feeling it was just th...
Created by
dirkmelvin
in Network Access Control
11-30-2017
11-30-2017
Our WLCs are 2504, running v8.5.105.0
Created by
dirkmelvin
in Network Access Control
11-30-2017
11-30-2017
My case# 683415389But it is closed now, as he gave me the docs for
manually doing this. Guess they a...
Created by
dirkmelvin
in Network Access Control
11-29-2017
11-29-2017
My install is a single instance for now. It doesn't matter which
wireless wizard I try to run, they ...
Created by
dirkmelvin
in Network Access Control
11-09-2017
11-09-2017
I have rebooted the server, I have restarted those services, I have even
reset the wireless setup.No...
Created by
dirkmelvin
in Network Access Control
11-09-2017
11-09-2017
ISE PROCESS NAME STATE PROCESS
ID-------------------------------------------------------------------...
Created by
dirkmelvin
in Network Access Control
11-09-2017
11-09-2017
I did turn on the service. And it is running, and this is my only ISE
server at this point. Still ev...
Created by
dirkmelvin
in Network Access Control
11-08-2017
11-08-2017
ISE 2.3p1(post 10-18-2017 update) VM, running on HyperV 2012R2I know the
wireless wizard is beta.But...
Created by
dirkmelvin
in VPN
09-27-2017
09-27-2017
I haven't read through it yet, but part of the problem with these
unauthorized Apple clients, is tha...
09-27-2017
Is there a configuration/setting on the ASA so that I can stop Apple
users from connecting to the VP...
Public Statistics
| Date Registered | 06-29-2007 08:21 AM |
| Date Last Visited | 07-27-2018 12:07 AM |
| Total Messages Posted | 136 |
| Total Helpful Votes Received | 18 |
Helpful Votes Given To
.jpg "VIP Mentor"){kind=icon}
Helpful Votes From
