The ISE posture scanning will work on wired, wireless and VPNs. There are multiple steps to getting the posture policy configured. This post will go through each step. Client Provisioning Policy This part has three main components – Upload AnyConnect VPN and ISE Compliance Module – Create Posture Profile – Create AnyConnect Configuration The files […]
ISE Lab: ASA AnyConnect 2 – ISE Posture Read More »
This lab is demonstrating the use of Cisco AnyConnect and ISE. AnyConnect can be used in conjunction with ISE in a similar way it can on a wired LAN.Based off a username, ISE can determine which group-policy to apply to an AnyConnect user, and apply a downloadable ACL (dACL) to that user. In addition to
ISE Lab: ASA AnyConnect 1 – VPN, RADIUS and Policy Sets Read More »
This is the configuration to get the switch access-switch1 to talk to ISE. This is the beginning stage of 802.1x. The switch will need to talk to ISE using RADIUS to ask if the user credentials are valid. ISE will ask the AD server and then a yes or no is sent back to the
ISE Lab: Wired 1 – RADIUS & Switch RADIUS Config Read More »
As this is a lab topology, it relies on lab licenses. For ISE this means that there is a 90 day period. The license I have has expired and requires fixing. This is quite simple to perform. All that needs to be done is a config backup taken from the old device and restored to
ISE Lab: Backup & Restore ISE Read More »
This lab will expand on the previous vPC configuration lab. I have made a few configuration changes since that lab. HSRP, vPC priority and the STP root is Nexus1. vPC Priority This isn’t like HSRP where it can be set to a higher priority than the default 100 and then that device will always be
Nexus VPC Troubleshooting Read More »
This is to configure vPCs on Nexus 9000s in GNS3. For this lab I will repurpose my Nexus Multicast Lab.I will need to add some extra links between mcast_nexus1 and 2 switches to accommodate the port-channel vPC link and the vPC keepalive link. My topology is going to be a basic topology of four Nexus
Nexus VPC Basic Configuration Read More »
I have added a multicast page to the web app that demonstrates the ability to pull in details for multicast. I originally planned to use this with the Nexus multicast lab, however as TextFSM or Genie do not support the parsing of the command “show ip mroute”. Side note Genie does support the command “show
Scrapli and Flask – Part 7: Multicast Dashboard Read More »
This lab is an extension of the IOS Multicast lab in some ways. This lab will explore the Nexus config and commands. The IOS lab explains the PIM modes and shows how PIM and IGMP work with packet captures. The lab was created quickly using the base config template creator from my Scrapli and Flask
Multicast Lab Nexus: PIM Sparse Read More »
I have added the ability to create a base device template for Cisco IOS, Nexus and IOS-XE.The idea of this is to create a quick way to get a basic configuration to SSH on to the device. For switches, the options for configuration can become quite complex as you can have either a VLAN or
Scrapli and Flask – Part 6: Base Config Device Templates Read More »
I had some trouble with this lab. The IOS switches do not seem to be truly layer 3. They have routing functionality and my mcast_switch is taking part in EIGRP. However if I use it as the default gateway for my mcast_client PC on a 172.x.x.x network then the switch is not able to route
Multicast Lab IOS15: IGMP Snooping and BSR Auto RP Read More »