Two 2960s are directly connected by UTP. However, 2960 ping can not be done. Attach the configuration below.   1_2960> interface GigabitEthernet0/43   switchport access vlan 318   switchport mode access interface Vlan318   ip address 172.26.18.5 255.255.255.0   2_2960> interface GigabitEthernet1/0/24   switchport access vlan 318   switchport mode access interface Vlan318   ip address 172.26.18.8 255.255.255.0   CDP neighbor information is normal. I attach the whole Config below. ... View more

  If you look at the L2L VPN Session, you will see nothing in the session list. The configuration one ASA5525 (headquarters) and two ASA5516 (branch offices) are connected 5525's outside IP is connected to Dynamic.   I attach running-config. Help me plz!!! ... View more

  We are in the process of certification testing with ISE 3566 2.6 equipment. But the above fails.       The detail information of the log is shown below. 5434 Endpoint conducted several failed authentications of the same scenario When I search Google, it seems to be recognized as a DDOS attack. https://community.cisco.com/t5/policy-and-access/ise-and-failed-authentications-conducted-by-endpoints/td-p/2971530 I tried to use the method mentioned in the link above, but I do not see the "Radius, Suppress Anomalous Clients" menu. I think it's probably the version difference. How do I resolve this issue in version 2.6? ... View more

  I configured NTP point to my Window server for time synchronization. Unfortunately ISE always select LOCAL(*127.127.1.0) as a time source. Does we have any configuration to force the ISE to sync time with Window Server? Thank for your kindly support. Note that ISE is VM-based. ... View more

I want to connect two ISE devices.   As far as I know, I know that when I connect two ISEs, one is active and one is standby.   Do I have to buy a license each? Or does Active ISE only buy licenses and share licenses with Standby?     https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_22_chapter_010.html#ID59 ... View more

Automatic Failover to the Secondary PAN You can configure ISE to automatically the promote the secondary PAN when the primary PAN becomes unavailable. The configuration is done on the primary administrative node (Primary PAN) on the   Administration   >   System   >   Deployment   page. The failover period is defined as the number of times configured in   Number of Failure Polls Before Failover   times the number of seconds configured in   Polling Interval . With the default configuration, that time is 10 minutes. Promotion of the secondary PAN to primary takes another 10 minutes. So by default, the total time from primary PAN failure to secondary PAN working is 20 minutes.   https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_22_chapter_010.html#ID330     I am reading an article on ISE fail over.   What does the default configuration in bold mean?   The document states that Auto Fail over takes a total of 20 minutes.   Does Manually Fail over also take 20 minutes?     ... View more

Hello. I want to export data from ACS 4.2 to ACS 4.2. user, group,network, etc... Please tell me how. ... View more