I have been tring to work with a few TAC guys on getting an Out of Band, Virtual Gateway configuration implemeneted, but for various reasons, we seem to be missing each other.
I belive I have everything configured properly, however, I am unable to get a correct IP address in my authentication roles, and when looking at the CAM manager pages, I see the connection to the authentication vlan, but the test user never gets any further. Anyone have any suggestions? (short of opening a TAC case.)
Yes, I am discussing Clean Access. When configuring a OOB VGW, you dont get a choice on where your DHCP is hosted - meaning the CAS will not host dhcp for you if your in VGW mode. I since opened a tac case, and we have encountered a more pressing issue - im able to get ip now (had the wrong vlan on the edge switch) but, NONE of the rules are being enforced. Clients that do not have the Clean Access agent are allowed free reign on the network.
Well, I think thats part of the rub - the agent on the test box only shows local DB, or Radius. I have setup an LDAP connection to my AD, but its not an option on the client. (my test user is on the raidus, so its getting authenticated).
2 questions -
1. How do I get the LDAP authentication option to show up for the clients that are OOB (and NOT for the INBand)
2. How do I make sure the correct user role is assigned to OOB users VS Inband?
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...