About Rob Ingram

Rob Ingram · 03-03-2024

Any ThousandEyes training or certifications planned?

Rob Ingram · 06-17-2025

@ggenti as it's the ISE deployment you manage, then you change you EAP certificate to a certificate the partner device trusts (a public CA signed certificate) and import their CA certificate to your ISE. They should then be able to authenticate to yo...

Rob Ingram · 06-17-2025

@ggenti ISE only allows one EAP certificate, but you could use a public CA signed ceritifcate that all client computers would trust. Then import the customer's private CA certificate to ISE trusted certificate store. ISE will then be able to authenti...

Rob Ingram · 06-17-2025

@DOUMI so if you are seeing unauthorised login attempts they must be permitted by another rule? Run packet-tracer to simulate traffic that should be allowed (whitelist) and another that should be denied. Confirm what ACL ACE should be matched.

Rob Ingram · 06-16-2025

@DOUMI is the above configuration before or after the change? I don't see a group called white-list There would be an implict deny, so if you are seeing unauthorised login attempts they must be permitted by another rule? Run packet-tracer to simulate...

Rob Ingram · 06-16-2025

@DOUMI if you created a new ACL did you apply that to the interface - "access-group <ACL NAME> in interface <INTERFACE>" if not the ACL is not in use. If that is not the issue, please provide your configuration so we can determine the cause.

Member Since	‎12-05-2010 06:35 AM
Date Last Visited	‎06-17-2025 08:18 AM
Posts	10,702
Total Helpful Votes Received	17177

User Statistics

User Activity

Any ThousandEyes training or certifications planned?

Re: Can I add two different trusted certificate in ISE?

Re: Can I add two different trusted certificate in ISE?

Re: Cisco ASA set ACL of white list fail to function

Re: Cisco ASA set ACL of white list fail to function

Re: Cisco ASA set ACL of white list fail to function