About russell.sage

russell.sage · 03-15-2024

I have a customer with ISE 3.1- I have a customer laptop and was asked to update my Corporate password. Which I did. Now I can no longer connect to their corporate wifi. ISE tells me see below. Which would be fine but I go to ISE and the Active Direc...

russell.sage · 02-26-2024

I have a Cisco 9404R running 16.9.5 with a C9400-LC-24XS line card for connecting access switches. Video conference unit connected to the access switch are marking the traffic and EPC's on the access switch uplinks to the core show the packets being ...

russell.sage · 02-21-2024

Can anyone categorically confirm that the 2960XR will support ip tcp mss adjust? the Feature Navigator would indicate it doesn't but there are posts in the community which talk about changing the SDM profile to routing but I don't see how that is tha...

russell.sage · 02-08-2024

I have a customer who has laptops with a VPN client and a certificate issued via SCEPMAN. The VPN client connects to Netmotion which in turn sends a radius request to the ISE for the client certificate to be checked against SCEPMAN and the result pas...

russell.sage · 10-12-2023

I have 10 CSR spun up across AWS and Azure currently running 17.3.4a the Cisco recommended release. However, there are security vulnerabilities against this release and its 2years+ old. Cisco have just released 17.3.8 (02 Oct 23). Has anyone had any...

russell.sage · 03-16-2024

The customer does use EAP-TLS but is in a transitional phase moving from on premise AD to AzureAD and Intune. I have one of new transitional machines which is using PEAP until the migration is complete.

russell.sage · 02-21-2024

So I have server on a remote site that needs to communicate with MS Defender. The server initiates an outbound connection but sets it TCP connections with an MSS set at 1460 but has to traverse a Meraki Site to Site VPN which reduces the MTU down to ...

russell.sage · 02-09-2024

Greg many thanks. A tcp dump of the RADIUS traffic coming from Netmotion doesn't include a Called-Station ID with mac address. Just a NAS Identifier. I will feedback to the Netmotion team.

russell.sage · 02-08-2024

Its probably me. Netmotion makes a radius request to ISE for access by requesting that ISE conduct a certificate revocation check with SCEPMAN. If the customer uses a revoked certificate ISE sends backs a radius access-reject message else if the cert...

russell.sage · 02-08-2024

Hi don't expect ISE to evaluate the certificate I would expect ISE to make an OCSP request to SCEPMAN and that does appear to be happening. So are you saying if ISE doesn't evaluate the certificate then nothing should be seen in the Live logs even th...

Member Since	‎12-23-2003 05:56 AM
Date Last Visited	‎03-20-2024 12:30 AM
Posts	179
Total Helpful Votes Received	28

User Statistics

User Activity

ISE 3.1 Active Directory synchronisation

Cisco 9404R losing packet marking

2960XR TCP MSS adjust

OCSP and Live Logs

CSR 1000v Recommended software release

Re: ISE 3.1 Active Directory synchronisation

Re: 2960XR TCP MSS adjust

Re: OCSP and Live Logs

Re: OCSP and Live Logs

Re: OCSP and Live Logs