Hi,Does anyone have any experience of Anyconnect not being able to find a valid user certificate despite one being in the Microsoft User Store? The situation is we use EAP-FAST and multiple certificate authentication (MAchine and USer), Automatic and...
If I have two separate fabric sites separated by an IP transit, but a common VN configured in both (different subnet per site), how do I create one authorization policy in ISE for that users of that vn? When I go to create an authorization result to ...
To implement EAP-FASTV2 with machine and user auth, our customer has requested we use certificates, separate local machine and individual user.
How best to distribute the individual user certificate? The network is 802.1x enabled, so I can pull an...
Hello,I have been working through the creation of a Guest portal using ISE 1.2 and WLC's version 7.6.There is a foreign WLC and an anchor in this scenario, both are 5508 devices.I have created a new Guest Wireless SSID on both. I am doing Layer 2 MA...
Hello,Can anyone confirm as the Cisco site itself is not very clear on this, that when the new VS-S720-10G-3C is configured into VSS mode, that it supports IPv6 unicast routing and OSPFv3?Thanks
HI, the majority of laptops are on 4.7.00136 which was a mistake, and we are in the process of getting people to 4.7.04056. Anyone running either of those clients though does have the problem. The laptops are running the equivalent Anyconnect NAM a...
Forgot to add, certificate overide is enabled, and certificate matching with various fields. This will be working for the user quite happily and then one day it doesn't and we have to replace the user cert, and then it all works again.Certificate has...
The recommendation if you follow the prescriptive design idea to host it all outside of the fabric. It is possible to manually host elements in the fabric but you would need to do a few things: Assuming you use a dedicated VN for hosting ise and ...
Hi, machine certificates get issue with the build, it's user certificates once the pc is ready for deployment that is required, but te environment is fully dot1x so the new policy needs to accommodate user certs distribution. Nam doesn't seem to have...
