About GRANT3779

GRANT3779 · 10-09-2025

I have a 3.4 ISE deployment on latest patch. It is "connected" to Entra via REST as an external identity store. I have pulled down a group from Entra (call it BYOD-EMPLOYEE) and I'd like to achieve the following -Have a BYOD style portal or similar f...

GRANT3779 · 10-08-2025

Hi CSCIs it possible to do use TEAP / EAP Chaining within ISE when using only the certificates as a check? Basically, just check cert is trusted and no other checks are done. Can the user and machine cert be chained using just this check?

GRANT3779 · 10-06-2025

When using central switching -with the 9800 WLCs can we have different physical ports plugged in and used independently from say the main LAG?. Scenario I am thinking would be separate interface on the 9800 plugged into a DMZ and send guest related S...

GRANT3779 · 09-22-2025

Hello CSC,Looking for some advice and also to see if this is a common scenario. All the VXLAN guides I see refer to Spine/Leaf which this is not.We have our core switching (9500 stackwise virtual) with 4 nexus connected at L2 (2 x VPC domain). All GW...

GRANT3779 · 11-03-2023

Hi Guys,I'm looking at the Wireless options available for what will be a new FAIB site. DNAC running 2.3.3.7. The main consideration for us is that the BW is limited at sites so don't want to backhaul data traffic to a Central WLCWith the above consi...

GRANT3779 · 10-23-2025

Thanks @Greg Gibbs. Seem to have his all setup now. When I click test portal within ISE I get the redirect where I can enter my Entra credentials and it authenticates. I then get the following splash page from ISE however.The URL when this page is re...

GRANT3779 · 10-08-2025

Thanks @Rob IngramI guess one last question would be around the authentication policy. For the "user not found" option would this need to be set to continue rather than reject (or whatever it says)?

GRANT3779 · 10-29-2023

Hi Jedolphi, Just reading this thread and want to query what you said as I'll be doing something similar. You say the EWC on 9k don't support local or central switched SSID, only Fabric. What is the data path for this? Similar to Flex connect or is t...

GRANT3779 · 10-20-2023

I was going by this document belo which seems to suggest you could do pretty much everything from build HA, Deploy SSIDs, Provision APs. etc. Does this document not describe a non fabric deployment? Unless I'm missing something https://www.cisco.com/...

GRANT3779 · 05-04-2023

Thanks for that information! Is this still being done via DNAC or "old school" via CLI on switch? When you say create VLAN Interface, does this transit vlan still require a L3 interface to be created in the fabric even though I'm using it for L2 tra...

Member Since	‎01-10-2013 08:26 AM
Date Last Visited	‎10-27-2025 05:46 AM
Posts	1,179
Total Helpful Votes Received	387

User Statistics

User Activity

BYOD for Employee using REST / Entra External Identity Source

EAP Chaining - cert check only

9800 WLCs - different physical ports to split services

VXLAN to be introduced to an existing / brownfield environment

Wireless Flex Connect OTT

Re: BYOD for Employee using REST / Entra External Identity Source

Re: EAP Chaining - cert check only

Re: SD-Access FIAB - anchored guest SSID support?

Re: New 9800 WLC Pair - DNAC or Not?

Re: Transit VLANs only on Fabric Device