About wags

wags · 03-28-2023

Is there a way in the ISE GUI or CLI to look at the internal database of TACACS users, to determine how soon the password needs to be changed on a specific account (or a counter showing the number of days since last changed, or the like). In our cas...

wags · 12-14-2022

Mostly wondering if other have seen similar abnormalities. And if so, what they found as root cause.We upgrade about 125 Cisco 9300-48 stacks switches (minority model in our fleet) from 16.12.2 to 17.3.6. During that upgrade we had ~2% of the switche...

wags · 08-01-2022

Hope this is not too big of a can of worms......Is there a preference for applying upgrades and patches to ISE with the CLI or GUI? I've applied patches and upgrades from 3.0 to 3.1+ via the GUI and have had good success on the deployment I am resp...

wags · 07-19-2022

We found this thread: https://community.cisco.com/t5/network-access-control/ise-operational-backup-content/td-p/4184440 where it indicates that the Operational Data Backup contained basically RADIUS and TACACS logs.We log most RADIUS and TACACS data...

wags · 07-13-2022

Is there a way to have the ISE admin and TACACS admin accounts be the same name? ie: For ISE admin under "administration/system/admin access" have "bill.smith.admin". And under the "work centers/device administration/Identities" have the same acco...

wags · 03-30-2023

Charlie, that is so great to hear/see. It will (in our near future) save me a good deal of headaches. And any newbie can manage it without instruction!! LOL. Again thanks.

wags · 03-30-2023

Thanks for the responses, however unless I misunderstand they are not what we need. We need to check specific internal/local accounts for upcoming password expiry in some way. It would be a non-issue if Cisco would provided the ability to assign...

wags · 08-03-2022

I thank all who replied with great thoughts and ideas. Arne, We will never know what exactly happened. The admin and TAC have basically moved on. The machines appear to be back ready to rejoin the deployment after several months. Also, not bei...

wags · 08-02-2022

I started when Cisco equipment was putty and orange colored. CCNP from 2000-2022. I can honestly say that our situation is the biggest mess I've seen in my career for any vendor. How can a patch/upgrade brick an entire system and its logs? Than...

wags · 07-19-2022

Thanks for the reply! Do you know where there might be specific Cisco documentation? Something that we can point to for an auditor who might think differently about the subject?We have those already set up because we have historically used syslog ...

Member Since	‎11-04-2004 03:02 PM
Date Last Visited	‎03-30-2023 08:21 AM
Posts	42
Total Helpful Votes Received	25

User Statistics

User Activity

Determine password age of an ISE 3.1 TACACS user (internal database)

IOS upgrade on 9300 seems to only read first switch of stack config

IISE 3.1 patching via CLI or GUI preferred?

ISE operational backup content to syslog instead of backups

Can ISE admin and TACACS admin be the same names?

Re: Determine password age of an ISE 3.1 TACACS user (internal databas

Re: Determine password age of an ISE 3.1 TACACS user (internal databas

Re: IISE 3.1 patching via CLI or GUI preferred?

Re: IISE 3.1 patching via CLI or GUI preferred?

Re: ISE operational backup content to syslog instead of backups