Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Switch configured to use port 1812. Why in debug radius authentication, do we see port 1645 used between switch and ISE? See config and debug output below:
CONFIG:
L3-SWITCH(config)# radius server ISE-PRIMARYL3-SWITCH(config-radius-server)# address...
If a user onboards 3 BYOD devices on corporate network (iPad, Android phone, laptop), will the MS CA issue separate certs for each device or will it re-new the cert, adding as SAN the additional device's MAC address? i.e.: 3 certs or 1 cert with 3 ...
Is there in FireSIGHT a tool similar to ASDM Packet Tracer to test the hoops that a packet has to go through in Sourcefire Service module? (Or maybe there is a CLI command in sfr similar to asa privilege command: packet tracer input inside tcp 10....
I tried Jan suggestion and it worked, on port 1812, without changing the group radius. Following are the results:
L3-Switch#test aaa group radius server 10.10.2.50 auth-port 1812 acct-port 1813 admin admin$Pwd new-code User rejected L3-Switch# <out...
command used is:
L3-SWITCH# test aaa group radius admin admin$Pwd new-code
new-code means use port 1812/1813. If the keyword would have been legacy, that would have mean to use port 1645/1646.
So, it's still puzzling that if we tell the switch to u...