About Mike.Cifelli

Mike.Cifelli · 02-07-2022

Anyone aware of any bugs relating to DNAC 2.2.3.4 & ISE 3.0p5 integration? Issue has appeared post ISE bundle upgrade end of last week. Integration snippet from DNAC: DNAC System360 snippet status: Debug Logs from DNAC for ISE integration: ---...

Mike.Cifelli · 12-01-2021

A while back I created a python script that would essentially automate 3/6 phases for deploying a new edge node to an existing fabric. I have now migrated things into ansible and currently can accomplish automating 5/6 phases via consuming APIs. An...

Mike.Cifelli · 09-09-2021

I am going to provide a general understanding on how to use a custom Ansible module. A module is essentially a reusable standalone script that Ansible will run on your behalf. The module can be run remotely and/or locally. Modules have the ability to...

Mike.Cifelli · 06-18-2021

Seeking some guidance on something I am stuck on atm. I have been spending a decent amount of time with Ansible and ISE APIs as of lately. I am able to consume ISE APIs when running several GET/POST calls. However, I am having an issue when needin...

Mike.Cifelli · 05-11-2021

Recently encountered an 802.1x onboarding issue to an SDA fabric after upgrading IOS's to anything above 16.12.4 on multiple 3K/9K platforms. This one took some time to resolve. Here were the following issues: The SDA switch config, 802.1x config, su...

Mike.Cifelli · 05-14-2022

Definitely use the link provided by @ahollifield 3. License Migration from 2.X to 3.X- Can both ISE 2.x and 3.X nodes can consume ISE smart licenses? -Yes. Note that the license model between 2.x and 3.x has changed. Any 2.x model type licenses w...

Mike.Cifelli · 05-14-2022

Make sure nothing is blocking TCP 8905 in the path between tested client and ISE PSNs. You mentioned this: callhome the DNS name of it -Make sure when in the AC Unknown state that the name is actually resolvable. If not, you may be better off with ...

Mike.Cifelli · 05-14-2022

Is it possible/feasible to configure port-security on the port-channel/EtherChannel configured interface? If not why or if possible what's the procedure? -Not sure the desire here. Port sec is typically for access ports if unable to secure the ports...

Mike.Cifelli · 05-10-2022

AFAIK this is the default settings for 2.4. I know with later versions you can set port, connection timeout, encryption settings, and authentication settings. HTH!

Mike.Cifelli · 05-09-2022

Do we need to convert the old fashion license to new mode (Essential, Advantage...) before the upgrade or we can do this after the upgrade? Any special thing to take into consideration with the license upgrade porcess ? Also, for the new VM license m...

Member Since	‎01-10-2019 05:54 PM
Date Last Visited	‎10-16-2024 08:43 AM
Posts	1,600
Total Helpful Votes Received	3252

User Statistics

User Activity

DNAC 2.2.3.4 & ISE 3.0p5 Integration Issue

Automate Port Provisioning for Host Onboarding with Ansible/Python

Custom Ansible Module to interact with ISE Session API

Ansible & ISE APIs

SDA Fabric 802.1x Onboarding Issues

Re: ISE (SNS-3695) Cluster on-boarding steps

Re: Cisco ISE No Policy Server Detected - Pushed from the ASA

Re: port-security configuration on port-channel/etherchannel

Re: SMTP server configuration in ISE

Re: ISE 2.7 to 3.0/3.1 upgrade