About Philip D'Ath

Philip D'Ath · 03-06-2022

I'm using Cisco AnyConnect on ASA against Cisco Duo. SAML is being used for authentication. Is there a SAML role I can push (from Duo) to apply a per-user ACL (like a RADIUS Filter-Id), instead of having to use some other authorisation option like RA...

Philip D'Ath · 10-29-2021

I have a customer with a bunch of ISR4331 routers running IOS-XE 16.9. These routers are air-gapped and have no connection to the Internet. They have APPX licences. They want me to upgrade them to something after 16.10. This means I must migrate t...

Philip D'Ath · 05-27-2019

The existing clients will work just fine. They will negotiate with the AP how much bandwidth to use.

Philip D'Ath · 07-24-2018

Using a Cisco SFP?

Philip D'Ath · 08-30-2017

It is not temporary, so something put them into the routing table and it sounds like they got withdrawn later. Also, while they look like a default route they are not. The default route is 0.0.0.0/0.Any other prefix means the network starts with 0...

Philip D'Ath · 05-21-2023

I've seen 99.9% of my customers move to Cisco Meraki.

Philip D'Ath · 04-26-2023

I've never heard Cisco Meraki talking about FTM, so I would say it is extremely unlikely.

Philip D'Ath · 04-22-2023

>For security reasons, two networks are separated physically and they should not be connected. All clients have two PCs, one for the internal network and another for the Internet. I know this structure is not standard and that's why I'm trying to con...

Philip D'Ath · 04-22-2023

I have seen several networks like this, mostly in defence, factories and critical control networks. Typically users are given two computers, one connected to each network. Sometimes you will have a "data diode" which allows one-way communication an...

Philip D'Ath · 04-05-2023

The two best candidates would be the Meraki Z3 and the Z3C (the Z3C has built-in cellular).https://meraki.cisco.com/en-au/products/sd-wan-teleworker/ To deploy at scale you create a template. Typically you would allocate a supernet (for example /19...

Member Since	‎10-25-2001 11:47 PM
Date Last Visited	‎05-31-2023 12:57 PM
Posts	6,795
Total Helpful Votes Received	3954

User Statistics

User Activity

Using only SAML can you apply a per-user ACL for AnyConnect on ASA?

OFFLINE traditional licence migration to smart licencing on IOS-XE

Re: what happens with the clients that do not support 80 MHz channels if I change all the APs to work in 80 MHz

Re: Cisco ISR 4431 / Interface media type unknown

Re: default route 0.0.0.0/1 and 0.0.0.0/15 in our EIGRP Routing Domain

Re: what is the most sought-after networking equipment models today?

Re: Is there a Cisco WiFi Access Point that supports Fine Time Measure

Re: What are benefits of integration two separate networks in a compan

Re: What are benefits of integration two separate networks in a compan

Re: Meraki devices suitable for Teleworkers