About nplusplus

nplusplus · 01-31-2024

Good Day, Community,I am an ISE operator, and I have been tasked with resolving the issue of Apple Macs occasionally failing to respond to EAP-Request frames and frequently failing to send EAPOL-Start frames upon link-up in a wired 802.1X environment...

nplusplus · 10-18-2023

Good Day, All,We are currently encountering a problem where a small number of MacBooks are failing to process Identity Request packets for wired authentication before the connected ports are falling back to MAB. This seems to occur when the devices ...

nplusplus · 04-06-2023

Can anyone point me to documentation for setting up authorization for the "My Devices" portal for ISE 3.1? I am particularly interested in SAML authentication use cases. It seems that my only option here might be to setup multiple external identity...

nplusplus · 03-30-2023

Good Morning (US EDT), All,It seems that between 4.2 and 5.2, ACI started generating a hash to use as the name for portblk objects when creating them through the UI. Portblk objects used to be named "block<#>" where # seemed to be sequential. Does ...

nplusplus · 02-07-2022

Good Evening, All, Does anyone know how I might refer to a particular TTY line or range of TTY lines on a device to use as an authorization condition for TACACS device administration in ISE? We are providing console services via an async module with...

nplusplus · 08-02-2023

Thank you, @Rodrigo Diaz ,Just now circling back to this. Guess I'll need to ask my IDP admins if they can filter users on the front end.Regards,Nathan

nplusplus · 04-06-2023

@Mike.Cifelli , I apologize for not replying for so long, but I just wanted to provide an update. This fell on the back burner but came back up again in the last few weeks. I ultimately ended up doing it in TACACS and used a "Device Port Network Co...

nplusplus · 04-06-2023

Not sure if I should be excited or worried given that I currently have to upgrade to 5.2.7 soon.Thank you,Nathan

nplusplus · 04-05-2023

Thank you for the guide! "sh access-session..." output seems to indicate it works. Now I just need to test it the next time I am onsite. I do have a few notes. 1) It seems, at least in ISE 3.1, that the configuration audit log no longer provides t...

nplusplus · 02-09-2022

Thank you, @Mike.Cifelli , I'll try this as soon as I get an opportunity and let you know the outcome. My only doubt comes from not seeing "NAS-Port-Id" in the session logs. Regards,Nathan

Member Since	‎03-08-2016 04:08 AM
Date Last Visited	‎04-17-2024 09:20 PM
Posts	21
Total Helpful Votes Received	13

User Statistics

User Activity

MacOS Wired .1X Silence

MacBook 802.1X Initialization Delay

My Devices Portal Authorization for ISE 3.1

ACI UI PortBlk Object Naming

Console Server TTY/Port Control with ISE

Re: My Devices Portal Authorization for ISE 3.1

Re: Console Server TTY/Port Control with ISE

Re: ACI UI PortBlk Object Naming

Re: Downloadable URL-Redirect ACL with ISE

Re: Console Server TTY/Port Control with ISE