About harrzhan

harrzhan · 03-04-2024

I have seen scripts to restrict emails to specific domains, https://community.cisco.com/t5/security-knowledge-base/ise-sponsor-portal-create-known-accounts-page-customization/ta-p/3636414 is there a script to enhance this based on Guest type: Contrac...

harrzhan · 05-11-2020

We saw RSA connection failures after a new sdconf.rec file was uploaded. Removing the secrets did not fix the issue. Reverting to the old sdconf.rec file did not fix the issue. Only after the RSA admin reset on their side, thing started to work. Is...

harrzhan · 08-07-2019

My customer tries to add IPV6 address for a switch, and it seems the 2.2 does not allow IPv6. on 2.4 it does allow I do not see any documentation on this. is it allowed, or is there some configuration extra I would need to add?

harrzhan · 05-08-2019

We have a use case to use ERS API to update an identity group. Currently ERS-Admin has super admin on the Data access. Is there a way to limit the rights. We tried with duplicate and creation with a new policy and new group, nothing seems to work. ...

harrzhan · 01-24-2019

We have a Guest hotspot deployment with an AUP page. For some iPhones, after users accepted the AUP page, the CoA fires off correctly. However, the following request is an Authorize-only request, and it hits the default policy set (Basic authenticate...

harrzhan · 01-24-2019

We use wireless_MAB for admission to the policy set. We have a few SSIDs, and Guest is one of the SSIDs doing MAC filtering. We do use called-station-id to match the SSID.

harrzhan · 11-08-2018

We can see the MAC addresses, and they are the wireless MACs from the wireless devices.We are using 16.6.4 code on 3850. We do not see this behavior on 3750.

harrzhan · 09-04-2018

Thanks for the answer. However, the number of switches is too big to make it manageable. Adding one additional line, I would have to go to all the swtiches.

harrzhan · 04-06-2018

We have done the packet captures on the PC (good and bad) and on the switch. the length of the packets passing through from the good PC is the same as the one stuck in the phone. I am not sure the MTU is the problem. I am really thinking that the cer...

harrzhan · 01-17-2018

The TAC engineer is telling us the 470 and 905 are the same code for patch 5.

Member Since	‎01-11-2011 12:30 PM
Date Last Visited	‎04-17-2024 12:04 AM
Posts	22
Total Helpful Votes Received	2

User Statistics

User Activity

ISE Sponsor portal: Customization based on Guest Type

how to reset ISE RSA agents

ISE 2.2 patch 9 add network device IPv6 address

ERS-Admin authorization: limit it to only one Entitity group

Guest CoA and Authorize-only

Re: Guest CoA and Authorize-only

Re: multiple MAB on a switch port connecting to an AP

Re: Switch location based DACL

Re: EAP-TLS fails behind Cisco IP phone with validate server certificate on

Re: ISE 2.2 patch 5 and CSCve82240 bug