About wags

wags · 03-18-2025

When we cycled our ISE 3.3p4 deployment for p4 updates, specifically when cycling the PSNs our network took a big hit that took about a week to fully recover from. We are still in a bad way since what we've found/identified in our environment is stil...

wags · 07-26-2024

Does anyone know/have links to design/engineering guides for DHCP snooping and Dynamic ARP inspection for IOS? I've found implementation guides which don't seem terribly in depth.Environment is metropolitan/campus area network with over 1000 L2 switc...

wags · 05-15-2024

How to see what ROMMON variables are set while in a working 9K IOS-XE CLI? Remember sh ver no longer works on these.Based on reading below links, it appears that 9K devices no longer have the ability to show the ROMMON boot variables from IOS CLI. ...

wags · 03-28-2024

Hello all,20+ years ago I used debug all the time, however not so much so in the last decade. Seems like last time I called TAC on the 3850 debug command they gave me some silly answer that debug was a Cisco TAC command. WFIW All the Cisco.com debug...

wags · 12-01-2023

We migrated to RSTP long ago with normal/expected tweaks. I've never taken the time to review things in detail because the end result was the same thing STP did decades ago, prevent L2 loops. However we recently noticed slow convergence times durin...

wags · 04-01-2025

I will see what we can do, and again thank you. Also new data from yesterday's testing. If we delete the NAS from ISE, so no session with any PSN since we do not use default NAS. The switch will not correctly perform fallback for dead server on ...

wags · 03-31-2025

Arne Bier, thank you for all the input and suggestions. I must admit that trying to let the young pups take the reins has put me at a disadvantage with ISE 3.3. Retirement potentially on the radar after decades of CCNP and Ciscoisms and "turning over...

wags · 03-25-2025

Understand that we have gotten the problem slowed down enough, and people "self fixing", that we are having dificulty "catching" this. The following is based on an extremely limited sample.-Why are endpoints receiving an EAP Failure at all: unsure, h...

wags · 07-30-2024

For others who may drop in on this thread because of similar questions, the most complete data we've recently found is for the cat 9300, IOS 17.6x here. However, it seems to still leaves questions about dual sups and binding backups on flash, since...

wags · 07-29-2024

Balaji,Thank you for your response.-We've been 802.1x for about a decade. DHCP snooping and DAI are happening, even if we're not thrilled with DAI.-Our DHCP is server base, not IOS based.-We understand the basic concept of snooping and DAI and assoc...

Member Since	‎11-04-2004 03:02 PM
Date Last Visited	‎04-04-2025 01:02 AM
Posts	61
Total Helpful Votes Received	27

User Statistics

User Activity

With ISE 3.3.4 and Win 11 PKI 802.1x EAP failure goes into blocking

design guides for DHCP snooping and Dynamic ARP inspection for IOS?

Cat 9K switches, how to know how the machine will boot (conf-register)

Not seeing debug dot1x or mab event log entries on IOS-XE machines.

Rapid STP states vs show spanning tree output (RSTP blocking?)

Re: With ISE 3.3.4 and Win 11 PKI 802.1x EAP failure goes into blockin

Re: With ISE 3.3.4 and Win 11 PKI 802.1x EAP failure goes into blockin

Re: With ISE 3.3.4 and Win 11 PKI 802.1x EAP failure goes into blockin

Re: design guides for DHCP snooping and Dynamic ARP inspection for IOS

Re: design guides for DHCP snooping and Dynamic ARP inspection for IOS