About craiglebutt

craiglebutt · 09-11-2023

2 ISE deployments with different System certificates.The original deployment was built with System certificate using RootCA Sha1 this has been in place all the way to 2.7.Now the new 3.2 deployment system certificate as a new root and intermediate ce...

craiglebutt · 07-28-2023

As a hospital we advertise Eduroam for our Staff via the local UniversityThis has been working great for years.Now the University that we connect to for Eduroam are going down the SD Access route.No issues there, except where we both have the same vl...

craiglebutt · 06-08-2023

HiWe have a mobility anchor to local eduroam hub, had this sicnce 2015.They have just upgraded there AAA to ISE, all working, but there is an issue.We have 5 cataylst WLCs conencting, we use these 2 vlan 621 & 622 in our corporate range and Eduroam H...

craiglebutt · 05-19-2023

Running 2.7 patch 9.Created a policy for mobile wireless printers using ipsk, vlan assignment and acl.All working great, till printers started to get a totally differnt address, this wa down to the DHCP Scop maxing out after a cross site fail over wi...

craiglebutt · 04-21-2023

HiI've added a 9300 switch on to ISE and and using the Gui which is working.My question is I can see a lot of entries being logged on tacacs for authtication, seem to keep login while on the switch, is this normal? aaa new-model!!aaa group server tac...

craiglebutt · 09-11-2023

Are all the certs in the trusted section of wifi config on intune?

craiglebutt · 07-31-2023

HiThe secondary radius look up was from a post, if I read it right. https://community.cisco.com/t5/wireless/authentication-in-foreign-anchor-configuration/td-p/2041134We have 5 WLCs all anchoring to the Uni. On the Eduroam side, all users are being ...

craiglebutt · 07-26-2023

hiI shut the old secondary down, then powered up the new one to build, this is when I got the calls.No NAD are not pointing to this PAN for authentication, I just use this as a PSN now and then for testing.Thats the bit that is thowing me off. Cheers

craiglebutt · 07-25-2023

Hi ArnieI've just started the same upgrade from 2.7 to 3.2. But had to stop, we have several devices that used the Network Setup Assistant tool to onboard, soon as I deregistered and took down the seconday PAN, these stopped working.I rolled the ch...

craiglebutt · 07-19-2023

????"I haven't done it first hand yet, however 3.2 upgrade from ISE 2.7 backup and restore is supported, what makes you say its not possible ?" Can you show me where I said it isn't possible, it is possible I'm going from 2.7 patch 9 to 3.2 next wee...

Member Since	‎03-19-2013 04:09 AM
Date Last Visited	‎09-19-2023 04:15 AM
Posts	221
Total Helpful Votes Received	92

User Statistics

User Activity

Currently upgrading from ISE 2.7 to 3.2 certificate -Different Root CA

Dynamic Vlan assignment with a Foreign Anchor between 2 organisations.

Mobility Anchors, vlans, ISE, weird things happening

vlan assignment disappears from policy

TACACS - 9300 switch GUI

Re: iPhone not trusting certificate pushed by Intune for ISE Authentic

Re: Dynamic Vlan assignment with a Foreign Anchor between 2 organisati

Re: ISE 2.7 to 3.2 Migration Questions

Re: ISE 2.7 to 3.2 Migration Questions

Re: YAIU - Yet Another ISE Upgrade - question