Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have seen scripts to restrict emails to specific domains,
https://community.cisco.com/t5/security-knowledge-base/ise-sponsor-portal-create-known-accounts-page-customization/ta-p/3636414
is there a script to enhance this based on Guest type:
Contrac...
We saw RSA connection failures after a new sdconf.rec file was uploaded. Removing the secrets did not fix the issue. Reverting to the old sdconf.rec file did not fix the issue. Only after the RSA admin reset on their side, thing started to work.
Is...
My customer tries to add IPV6 address for a switch, and it seems the 2.2 does not allow IPv6. on 2.4 it does allow
I do not see any documentation on this.
is it allowed, or is there some configuration extra I would need to add?
We have a use case to use ERS API to update an identity group. Currently ERS-Admin has super admin on the Data access. Is there a way to limit the rights.
We tried with duplicate and creation with a new policy and new group, nothing seems to work.
...
We have a Guest hotspot deployment with an AUP page. For some iPhones, after users accepted the AUP page, the CoA fires off correctly. However, the following request is an Authorize-only request, and it hits the default policy set (Basic authenticate...
We use wireless_MAB for admission to the policy set. We have a few SSIDs, and Guest is one of the SSIDs doing MAC filtering. We do use called-station-id to match the SSID.
We can see the MAC addresses, and they are the wireless MACs from the wireless devices.We are using 16.6.4 code on 3850. We do not see this behavior on 3750.
Thanks for the answer. However, the number of switches is too big to make it manageable. Adding one additional line, I would have to go to all the swtiches.
We have done the packet captures on the PC (good and bad) and on the switch. the length of the packets passing through from the good PC is the same as the one stuck in the phone. I am not sure the MTU is the problem. I am really thinking that the cer...