About Rob Ingram

Rob Ingram · 03-03-2024

Any ThousandEyes training or certifications planned?

Rob Ingram · 05-21-2025

@Da ICS16 are the computers configured for "user or computer authentication" or "user authentication" or just "computer authentication". What do the ISE live logs indicate for the computer? From the CLI of the switch run "show authentication session ...

Rob Ingram · 05-21-2025

@SamsonOjo the webdeploy package you copied is for headend deployment from the ASA itself, it is not used for manualling installing on the client computer. You would need to download the predeploy package from the Cisco website. You will need the ASA...

Rob Ingram · 05-21-2025

@Denis Negik yes it certainly looks like the NPS server is communicating with the FDM, it even appears to send an "access-accept" message. Perhaps enable debugs on the FTD to see the "access-accept" packet being received. You say the NPS server does ...

Rob Ingram · 05-21-2025

@ColForbin the calculator is referring to the IPSec SA (transform set). Where you define ESP or AH (unlikely that is used) and the mode tunnel or transport. crypto ipsec transform-set T1 esp-aes esp-sha-hmac mode tunnel

Rob Ingram · 05-21-2025

@Denis Negik if you take a packet capture do you see the FTD send radius packets to the NPS server? If no communication, perhaps explictly specify the interface the FTD would communicate with the NPS server on (as opposed to rely on routing).

Member Since	‎12-05-2010 06:35 AM
Date Last Visited	‎04-29-2025 11:19 AM
Posts	10,667
Total Helpful Votes Received	17156

User Statistics

User Activity

Any ThousandEyes training or certifications planned?

Re: PC start-up process keep delay time

Re: Copy Cisco AnyConnect Installer from ASA to TFTP Server

Re: FMC 7.7 . Anyconnect Authorization on RADIUS server (NPS)

Re: crypto isakmp policy question

Re: FMC 7.7 . Anyconnect Authorization on RADIUS server (NPS)