Hi,Dealing with Cisco C9800 controllers and tons of FlexConnect APs, I've faced numerous issues/challenges with APs software Image Download process. Some related with certain software bugs, others with branch site poor network connectivity, or contro...
Hi,For Non-fabric deployment.I've provisioned the C9800-WLC-1, created WLANs. profiles, managed AP locations, and assigned APs to such location Floor...and life is good; all works as expected.Now I've Provisioned C9800-WLC-2, configured WLANs, profil...
Hi,I've been working on a setting up an EAP-TLS wireless auth in Cisco ISE 3.2 for mix of domain joined and Autopilot machines.At first I focused on machine authentication...I know it's not the easiest and not a best practice to set this up for AAD j...
Hi,I have a AP discovery case, which boggles my mind, as I wasn't able to find any explanation of it. We have a Infra with 2 SSO pairs of 9800 WLC's serving APs from multiple sites.Next to that, I have a test WLC.There's a mobility configured between...
Thanks Preston,indeed - associating Access Point to WLC, that is set to manage new AP location is the way to go.Once AP was registered to new WLC (I've done this through Configure AP Workflow) and DNA-C recognize this, it allows me to Assign to a Bui...
Thx Hege,This was the right spot.Although applying the workaround on the Windows machines and manipulating their registry settings worked, the workaround with disabling RSA PSS ciphers on Cisco ISE fix the issue more effectively.It took me some time ...
Hello guys.Think I found the problem.It's TLS 1.2 issue between Windows and Cisco ISE.It's not clear to me yet, if it's a specifically TPM related issue - described here and here , or a Windows/ISE TLS1.2 issue described here , where Microsoft is bla...
Machine certificate, issued by SubCA. Root CA cert under Trusted Root Certification Authorities folder: SubCA in the Intermediate Certification Authorities folder: Now, when I preconfigure this W10 machine to connect to SSID with EAP-TLS below settin...
