About JPavonM

JPavonM · 04-10-2025

Hi chaps, I anyone suffering this issue where AD joined laptops, authenticating into wireless with a profile configured to use PEAP-MSCHAPv2 and machine-auth only, are failing with the next error in ISE? 25113Number of bad password attempts for AD in...

JPavonM · 02-10-2025

Hi colleagues, I need some help from somebody who setup Cisco ISE Captive Portal for Juniper Mist (or any other cloud vendor as this maybe similar). I'm following this Mist guide about how to configure the Cisco ISE policies and profiles for the Capt...

JPavonM · 01-23-2025

Hi colleagues, Do you know if it is possible to create a Guest Self-Registration page with ISE portal builder and remove the pasword field or reset password? We are asking the user for a paassword but only entering the email address, accept the T&Cs ...

JPavonM · 11-27-2024

Hi community, I'm using a Custom Condition to block some laptops names during authorization and it works fine.I've managed to create an API to check the condition exist, and /add/remove new hosts to it, but I cannot manage to implement the call to cr...

JPavonM · 10-14-2024

Hi colleagues, This question is part of a M&A integration were their Identity Store for authentication and authorization is Entra ID, but we don't have Advanced licenses to connect with InTune so need a manual workaround to deny machines with revoked...

JPavonM · 05-22-2025

The best QoS scenario is that where the machines are setting proper QoS for every aplication, as Windows don't mark anything by default, so important traffic must deal with unwanted traffic like background services sendigng information to MS, or down...

JPavonM · 05-22-2025

From latest conversations with Cisco TAC, this defect is still under investigation by the engineering team, so it is not fixed yet.

JPavonM · 05-20-2025

Currently, aWIPS profiles in Catalyst Center (CC) and WLC are separated, I mean, the profiles in CC are there to match the informationshared by WLC, and the profiles in WLC are for the WLC to apply any countermeasure or policy you want (information w...

JPavonM · 05-19-2025

1. Cisco WLC classify all neighbour wirelewss networks as rogue Unclassified, so no risk at all with them, and no actions are taken agains any external networks unless especifically configured by the admin, what is not recommended. 2. The 3rd radio i...

JPavonM · 05-12-2025

That policy can be only enabled in the RADIUS server (ISE/NPS) but not in the WLCs. The only option is to tweak the Client Exclusion Policy in WLC to block the client for x amount of time if they send multiple failed authentications: wireless wps cli...

Member Since	‎11-28-2010 03:05 AM
Date Last Visited	‎04-20-2025 11:54 PM
Posts	1,123
Total Helpful Votes Received	2099

User Statistics

User Activity

Cisco ISE | PEAP Bad Password attempts for AD joined laptops

Mist AP and Cisco ISE Guest Portal

Get rid-off the password field in ISE portal builder for Guest

Cisco ISE API to create a Custom Condition

ISE 3.3 change custom name Policy Element via API

Re: C9800 Wireless QoS Best Practice Advise

Re: CSCwf20983 - ISE PSN failing to authenticate clients

Re: Cisco aWIPS on Catalyst Centre

Re: To Enable Monitor Radio in CW9166 AP

Re: Client Exclusion Policies for 9800