Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About damode
Stats
Member since
01-21-2018
59
Posts
10
Helpful
1
Solution
Created by
damode
in Network Access Control
in Network Access Control
02-26-2020
02:15 AM
02-26-2020
02:15 AM
can you please explain why ? Also, please recommend an alternative way we can achieve this ?
... View more
Created by
damode
in Network Access Control
in Network Access Control
02-26-2020
12:40 AM
02-26-2020
12:40 AM
They are already using MS-AD now for DHCP. The question is whether we can use ISE as DHCP and DNS server for handling wireless guest connections.
... View more
Created by
damode
in Network Access Control
in Network Access Control
02-25-2020
08:42 PM
02-25-2020
08:42 PM
I have a client who wants to deploy only single ISE node in their environment for wireless guest access. Their current DHCP server is configured in AD which is hosted in their datacentre. They are using Meraki MX devices for wireless ISE will be part of Corp network. Their concern is they dont want guest devices accessing the AD server for DHCP/DNS. In this case, I was wondering if I could use ISE as DHCP and DNS server. But I read in docs that these features exist in ISE for third party NAD devices that dont support dynamic or static url redirection. So, my question is, even though the client's NAD device would be Meraki, in that case, can I use ISE as DHCP and DNS server ?
... View more
Labels:
02-25-2020
08:27 PM
Can we use ISE as DHCP/DNS to prevent guest traffic using internal DHCP/DNS servers ?
... View more
02-24-2020
02:56 PM
So after a lot of troubleshooting with TAC, eventually the fix turned out to be a simple AP reload. However, this time even though after reconnecting, the device immediately connects to the guest network (which wasn't the case before), there is still a certain delay in getting internet access. This is only on iPad. On Android device, its working fine.
... View more
Created by
damode
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-24-2020
02:52 PM
02-24-2020
02:52 PM
the issue I am facing is similar to this one but only on Apple device, where it immediately connects to the guest network but there is a certain delay in getting internet access.
... View more
Created by
damode
in Network Access Control
in Network Access Control
02-24-2020
02:51 PM
02-24-2020
02:51 PM
Thanks. I will check that and update here.
... View more
Created by
damode
in Network Access Control
in Network Access Control
02-24-2020
02:38 PM
02-24-2020
02:38 PM
I have a self registered test user whose account has expired. When I try to login using this account, it says, "authentication failed". Upon checking in radius logs, it shows user has expired. When I try to re-register using same username on the mobile device, it says, "user already exists". Currently, I just purged the guest account to be able to create a new one. However, is there a way to reactivate the self registered guest account which is expired ? As this is not a sponsor created account, I am assuming it doesn't show up under "manage accounts" for Sponsors.
... View more
Labels:
Created by
damode
in Network Access Control
in Network Access Control
02-24-2020
02:17 AM
02-24-2020
02:17 AM
Hi Muhammad, could you please advise how this policy would exactly look like in a ISE wireless guest access AuthP or AuthZ policy ? Replying to your previous qn, the WLC model is AIR-CT3504 and version 8.10.112.0.
... View more
02-19-2020
02:21 AM
Hi Arne, thanks for your reply. I am not using Remember-Me feature. Once the CoA has been sent to the WLC, the client is disconnected from the WiFI and then has to re-associate. This is the behaviour, I am not seeing. Even when the client is disconnected, it still shows in session in ISE. As stated in my post, when I reconnect the client, it shows 0.0.0.0 IP on the clients page on WLC under Monitor. What I have noticed is, when I "remove" the client from the active clients page on WLC, the client then immediately reconnects without any issues. Which seems related to the CoA issue you have indicated. I have also checked the ACL you mentioned is indeed being used to pass on WLC. Please see the attached pics. All the steps I have followed are from Cisco's ISE training which has this particular use case. With respect to HTTPS redirection, if Cisco recommends to disable captive portal bypass on WLC and HTTPS redirection is disabled, then on Apple devices, when SSID is connected and guest goes to any HTTPS link, he doesnt get redirected to guest portal for authentication. Hence, I had enabled HTTPS redirection. However, what would be your recommendation in this case to fix the redirection issue for HTTPS links if it is disabled ?
... View more
Created by
damode
in Wireless Security and Network Management
in Wireless Security and Network Management
02-17-2020
05:08 PM
02-17-2020
05:08 PM
were you able to get a fix for this ?
... View more
02-17-2020
03:52 PM
Two main issues I am facing as part of ISE guest access POC lab. On any device on first attempt connections works smooth. However, if I disconnect and reconnect the SSID, its repeatedly giving "Couldn't get an IP address" or "No internet connection" on connecting to SSID. On Windows workstation, on connecting SSID, it opens the re-direct page, upon clicking the "connect" link on the page, it opens another link repeatedly. On Apple, accessing HTTP website is redirecting to ISE guest portal. However, accessing HTTPS url doesn't redirect to the portal. Can someone please advise ? Thanks.
... View more
Labels:
Created by
damode
in Network Access Control
in Network Access Control
02-13-2020
01:34 PM
02-13-2020
01:34 PM
Does WLC requires any separate configuration as well in relation to this ?
... View more
Created by
damode
in Network Access Control
in Network Access Control
02-12-2020
01:41 AM
02-12-2020
01:41 AM
While setting up ISE 2.6 on SNS3595 servers, I chose the timezone as UTC, based on recommendation from ISE docs. Now, I notice all radius logs showing up with some minor delay and incorrect time. When I looked up to change the timezone to Australia/Melbourne, it didnt allow me on the CLI and neither through GUI. Going through similar posts on this forum, I realised its a bug and there is yet no patch for this, which means, I would have to reset ISE now. Firstly, why the docs recommend to set timezone ot UTC instead of location specific ? secondly, is there any better way rather than resetting ISE config and rebuilding ?
... View more
Labels:
02-10-2020
02:37 AM
Link doesnt work anymore. can you please update the link ? Thanks.
... View more
02-26-2020
can you please explain why ?Also, please recommend an alternative way we
can achieve this ?
02-26-2020
They are already using MS-AD now for DHCP.The question is whether we can
use ISE as DHCP and DNS ser...
02-25-2020
I have a client who wants to deploy only single ISE node in their
environment for wireless guest acc...
Created by
damode
in Security Blogs
02-24-2020
02-24-2020
So after a lot of troubleshooting with TAC, eventually the fix turned
out to be a simple AP reload. ...
02-24-2020
the issue I am facing is similar to this one but only on Apple device,
where it immediately connects...
Created by
damode
in Network Access Control
02-24-2020
02-24-2020
Thanks. I will check that and update here.
Created by
damode
in Network Access Control
02-24-2020
02-24-2020
I have a self registered test user whose account has expired. When I try
to login using this account...
Created by
damode
in Network Access Control
02-24-2020
02-24-2020
Hi Muhammad, could you please advise how this policy would exactly look
like in a ISE wireless guest...
Created by
damode
in Security Blogs
02-19-2020
02-19-2020
Hi Arne, thanks for your reply.I am not using Remember-Me feature.Once
the CoA has been sent to the ...
Created by
damode
in Wireless Security and Network Management
02-17-2020
02-17-2020
were you able to get a fix for this ?
Created by
damode
in Security Blogs
02-17-2020
02-17-2020
Two main issues I am facing as part of ISE guest access POC lab.On any
device on first attempt conne...
Created by
damode
in Network Access Control
02-13-2020
02-13-2020
Does WLC requires any separate configuration as well in relation to this
?
02-12-2020
While setting up ISE 2.6 on SNS3595 servers, I chose the timezone as
UTC, based on recommendation fr...
Public Statistics
| Date Registered | 01-21-2018 08:47 PM |
| Date Last Visited | 03-20-2020 12:07 AM |
| Total Messages Posted | 59 |
| Total Helpful Votes Received | 10 |
.jpg "VIP Advocate"){kind=icon}
