About David Harrell

David Harrell · 01-07-2021

Hello all, We are in the design phase, and as a MAN, we are listed as a Large Site design. We have several locations that currently have C9200Ls as our access layer devices, and most of these are stacked for a single virtual switch. The deployment is...

David Harrell · 07-27-2020

Hello all, I hope you can help with this issue. I am seeing an issue with several endpoints and NADs, where the endpoint status in ISE doesn't match the endpoint status on the NAD. Here's the status of a Windows endpoint that hangs off a 7945G from t...

David Harrell · 12-12-2018

Hello all,I have a situation that I feel like needs another set of eyes. Installed ISE 2.4 last week, and had our test 7945G being profiled by the default IP Phone authorization rule, as we would expect, and "Permit Access". After configuring 802.1x ...

David Harrell · 02-01-2018

Hello all, I am hoping someone else has seen this issue, and can provide some insight. We performed the above mentioned upgrade and have since lost icmp traffic from our DMZ to the outside. All icmp traffic passes fine from the inside->outside, or...

David Harrell · 11-13-2017

Hello all, I have a script (attached) that gives the caller the option of being redirected to an external number. The problem is, when a caller chooses the option to be transferred to the external number UCCX and CUCM seem to hold onto the original...

David Harrell · 01-07-2021

Steve, That's good to hear. I was getting a little confused as to the wording on this pdf, when all the other deployment guides listed stacking as acceptable.

David Harrell · 01-07-2021

Jonathan, Thank you for the link. However, I do not see any negative references to stacking on Fabric Edge nodes in the PDF.

David Harrell · 07-29-2020

Thanks for the reply. Yes, the port shows as MAB instead of Dot1x, and the username has changed to the MAC of the workstation. Interface: GigabitEthernet1/0/27IIF-ID: 0x1347829AMAC Address: 6400.6a87.1775IPv6 Address: UnknownIPv4 Address: 10.2.34.20...

David Harrell · 12-14-2018

This issue is resolved. Appears that port-security is not compatible with ISE. Once we stripped the port-security commands from the ports the phones authenticated fine.

David Harrell · 12-12-2018

As Surendra pointed out, the profiling process is happening. The issue now appears to be that the 7945G models get profiled as "Cisco-Device" instead of "Cisco_IP_Phone". In comparison, the few 8800 models that we have get profiled correctly.

Member Since	‎09-10-2013 03:21 PM
Date Last Visited	‎01-15-2021 07:10 AM
Posts	48
Total Helpful Votes Received	14

User Statistics

User Activity

Large Site - Dedicated Edge Node (No Stacking)

Endpoints moving from dot1x to MAB.

ISE 2.4 not authorizing Cisco Phones

ASA 5510 Upgrade from 9.0 to 9.1.7.20 "Routing failed to locate next hop for ICMP from DMZ"

Call Redirect to external number

Re: Large Site - Dedicated Edge Node (No Stacking)

Re: Large Site - Dedicated Edge Node (No Stacking)

Re: Endpoints moving from dot1x to MAB.

Re: ISE 2.4 not authorizing Cisco Phones

Re: ISE 2.4 not authorizing Cisco Phones