About JPavonM

JPavonM · 06-10-2024

Hi colleagues, Does anybody knows if there is a way to use push notification and not OTC when using Ciso ISE and MS NPS with EntraID extension to perform the 2FA authentication for device admin? I can't make it to use that option and I always receive...

JPavonM · 05-31-2024

Hi wireless colleagues, After multiple tries with the configurations I have managed to enable MFA on the C9800 for admin access through CLI by using TACACS+. The integration is done via ISE with NPS as Proxy RADIUS to Entra ID MFA Service in the clou...

JPavonM · 05-10-2024

Hi community, I'm trying to collect DHCP packets from a Nexus 5500 and the problem I have is that the capture is interrupted randomly, so I nbeed to keep looking at the console to re-run it again, and some times it takes me some tries to get it worki...

JPavonM · 05-10-2024

Hi community, I've followed the guidelines on this post but this is not working for me, and I'm only capturing DHCP Discoveries, but I'm missing the rest of the conversation (ORA packets).Anybody got this working at some time? Regards.

JPavonM · 03-14-2024

Hi experts, I'm new into ISE and wonder if there is a way to only accept connections from wireless devices using 802.1x-PEAP by using UPN (email address) and not the ones using SAM (pre-Windows 2000 logon). Regards.

JPavonM · 06-26-2024

It is always advised to install access points following vendor recommendations with regards of power requirements. Low power always mean 1)disabled radios or 2)weird behaviours in wireless connectivity. Here the specs for AP1560 series:

JPavonM · 06-26-2024

@Oscar Olsson you are correct. Whenever a DFS event is detected, the AP swap the channel but it keeps the channel width configured @20MHz until a new DCA calculation happen and the channel is re-configured as per the RF profile assigned to it.

JPavonM · 06-16-2024

If you're SSID is configured for dot1X, some devices need you to setup the profile manually as they don't recognize it, as Linux-based ones such as Androids.

JPavonM · 06-13-2024

To add more into that feature from Apple for iOS 18 and Sequoia, and due to the lack of information about it, this is likely to impact the quality of experience of users, as the MAC rotation could make the device to abruptly disconnect from the wirel...

JPavonM · 06-13-2024

I won't recommend you using QoS per SSID/device as it is more fair to keep them transmitting and finish the communication, than disrupting it and having to restart it again. Using QoS over the wireless link breaks packet aggregation thus increasing t...

Member Since	‎11-28-2010 03:05 AM
Date Last Visited	‎06-24-2024 10:46 PM
Posts	995
Total Helpful Votes Received	2007

User Statistics

User Activity

Cisco ISE for Device Admin with MFA (NPS proxy) and push notifications

C9800 Admin access through GUI with MFA

Nexus 5500 ethanalizer interrupts

Nexus 9000 ethanalyzer to collect DHCP packets on data plane

Authenticate on ISE using UPN and not SAM

Re: SSID is not broadcast

Re: APs configured with 40mhz changing to 20mhz

Re: Andriod device and other some thin clients devices not connecting

Re: BYOD with Random Mac drop connection

Re: Rate Limit WLAN on Catalyst 9800