As configured in the previous post, the vEdge routers have been manually configured in a traditional way. This is fine, but it means that the vManage server cannot manage the configuration. In order to use SD-WAN as intended, the configuration should be created on the vManage. To do this, templates are used. The first step […]
Cisco Viptela SD-WAN Templating Device Config Read More »
This post is to briefly go over the adding of a new vEdge to a GNS3 Lab. I have created a lab as shown in the screenshot below using the guide from this website. I am not going to repeat all of it, as it is very detailed and very clear already.However, I have changed
Cisco Viptela SD-WAN Adding vEdge Read More »
I am going to demonstrate two different FortiGate versions. 6.2.3 and 7.2.4. The major differences for a lab are in regards to the trial licencing and the limitations each has. The FortiGate trial licencing has some limitations that should be understood. Pre 7.2.1 the images had limited encryption usage quite heavily. For me this was
Adding FortiGate to GNS3 Read More »
BGP, Border Gateway Protocol, is the routing protocol that connects the internet, and it is versatile enough to be used from small to large environments. This will be a small reference for BGP basic knowledge. – Basics of BGP – Confederations – Route Reflectors – Neighbour Formations – Path Selection – BGP Synchronisation – BGP
Basic BGP Information Read More »
As ISE is using an API, Python can be used to interact with the API. This allows the use of programmatic logic to create, read, update or delete ISE elements. Basic GET I have created a simple GET that will just print the dACLs that ISE has. This is exactly the same API request and
ISE Lab: API 5 – Using Python Read More »
This post will find the details of an endpoint off the MAC address, and then see all the endpoints in a certain group.The API doesn’t seem to be able to search for an endpoint by IP address, as can be done in the GUI. Maybe it can, but with another API. The device that will
ISE Lab: API 4 – Search for Endpoint Read More »
This will be creating and deleting a dACL. Again, details can be found in the built-in ISE documentation. The Postman headers are the same as in the previous GET. Create The only changes here are; POST method and to add the dACL that will be sent with a name and description.A 201 response code will
ISE Lab: API 3 – Create & Delete dACLs Read More »
Now that the API has been configured, it can be tested. In this post, I will show a few base GET requests that can be made to ISE in Postman.There is a lot of documentation built into ISE to view which gives examples on the types of calls and examples of calls and returned output.https://172.17.5.101:9060/ers/sdk#_
ISE Lab: API 2 – First API GET Requests with Postman Read More »
ISE does not have the REST API enabled by default. It must be enabled in the ISE admin tab. When saved, there is information at the top showing the URL to an SDK info page that goes through the setup procedure.The most basic setup is only a single step to create an ERS admin. It
ISE Lab: API 1 – Setup Read More »
The posture configuration is very similar to the one that was created in the Anyconnect VPN post. This post will go over the posture steps and demonstrate what it looks like on a switch and also in the ISE RADIUS live logs. On a wired LAN connection using dot1x the ISE posture can determine based
ISE Lab: Wired 3 – 802.1x Posture Read More »