About jsalmond

User Azure Group Cisco ISE · 10-04-2023

Afternoon, Hoping someone can help, I am setting up a PoC for Intune and trying to integrate our Cisco ISE to perform EAP-TLS user Authentication which is working. Now followed the artificial here to https://www.cisco.com/c/en/us/support/docs/securi...

jsalmond · 08-10-2022

Afternoon, I have set up route based VPN between our on-premise Firepower appliance (Using FMC) and Azure, the VPN is up and BGP is advertising routes. The issue we face is that we are unable to ping or RDP to a VM in Azure from the inside networks. ...

jsalmond · 03-06-2022

For a while now we have been experiencing an issue where most of our iOS devices are unable to connect back to our 802.1x SSID once woken from sleep. 1) iPad will be connected the SSID and able to connect to the internet, Meraki Dashboard and Cisco ...

jsalmond · 10-09-2017

Morning All,Hoping you can help I have raised this with Apple but without paying for cross platform support they are unwilling to help.In our network we use Cisco ISE and as as part of this we register our iPads with the BYOD functions which download...

Re: User Azure Group Cisco ISE 3.2 · 10-06-2023

Hi @Greg Gibbs thank you for your reply applagies I have just double checked and our ISE is running 3.1 patch 7 not 3.2. I have a maintanence windows next week that I will upgrate to version 3.2 patch 2 and see if we get this to work.

jsalmond · 08-16-2022

Managed to get this issue resolved, problem looked to be with OSPF and BGP redistribution. Removed this element for now to get connectivity to Azure. @MHM Cisco World Thank you again for your help, unfortunately the FMC wouldn't allow the use of rou...

jsalmond · 08-10-2022

Phase: 1Type: INPUT-ROUTE-LOOKUPSubtype: Resolve Egress InterfaceResult: ALLOWConfig:Additional Information:Found next-hop 10.253.1.2 using egress ifc VTI_MBtoAzure(vrfid:0)Phase: 2Type: UN-NATSubtype: staticResult: ALLOWConfig:nat (any,any) source s...

jsalmond · 08-10-2022

Hi @MHM Cisco World Thank you for the reply, the results show 12 Phases with result as Allow it not until the results we see Action: dropDrop-reason: (unexpected-packet) Unexpected packet, Drop-location: frame 0x000000aaacc88868 flow (NA)/NAResult:in...

jsalmond · 08-10-2022

Hi @Moh Shakhatreh Thank you for the reply pre-filter are in place and packet tracer shows it as allowed. FMC doesn't have an option to specify the VTI interface and if I use Inside to Outside the traffic is then not routed out the VTI and over VPN....

Member Since	‎10-06-2017 03:50 AM
Date Last Visited	‎04-15-2024 05:32 AM
Posts	18
Total Helpful Votes Received	55

User Statistics

User Activity

User Azure Group Cisco ISE

Firepower VTI to Azure no traffic flow

IOS device re-auth after wakeup on Meraki/ISE

eap-mschapv2/peap profile issue with Apple iOS11 and ISE 2.0.0.306

Re: User Azure Group Cisco ISE 3.2

Re: Firepower VTI to Azure no traffic flow

Re: Firepower VTI to Azure no traffic flow

Re: Firepower VTI to Azure no traffic flow

Re: Firepower VTI to Azure no traffic flow