Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have DOT1X set up on our C9300 access ports with a MAB backup. The network policy is to authenticate with the computer name and the certificate. If I turn the computer on I get the following error:DOT1X-5 FAIL: Switch 1 R0/0: sessmgrd: Authenticati...
Hi!Do you have better guidance somewhere for this article: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/MAB/MAB_Dep_Guide.html#wp392453Where it says“Another option that avoids the password complexity requirements ...
According to this link https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/sec-vpn/b-security-vpn/m_ssh-configuring-sftp-username-and-password.htmlYou can set SFTP username and password. I am at 17.12.04 on my Catalyst 9300s and ip sftp is ...
We have dot1x configured on some ports on our C9300s. Lately we have been seeing when we restart the CA server for patching, as it restarts all the dot1x ports drop out because they aren't authenticated until the server comes back on and the ports ar...
Greetings!I am trying to create and issue an certificate for my Cisco C9300s. When we access our secure webserver for the switch it says it is not secure. We connect with https://ipaddress. I am using this How To to get it to work. Issue is when I im...
@Flavio Miranda we are using Microsoft DNS as part of our Active Directory environment in server 2022. How do I format the TXT records? And I am putting them in the Forward Look up Zone? And once I have that, how do I link them to the NPS? NPS has ac...
Also when doing the following to make the CSR I add the IP Address line. But when I look at the certificate it doesn't look like the IP address is added to the SAN. In fact the certificate does not have a SAN at all. It looks like something is gettin...
I am going to lay out we do not use OpenSSL as we are not allowed to. WE have to use our on network CA. For the CN I have set the CN to the IP address of the certificate. For the SAN Cisco has a separate commands that says ip-address which adds the a...
