About des.mckee

des.mckee · 02-15-2016

Hi,I have a requirement that I logically think can be met using ACS but I'm struggling to get it actually configured.I have an existing wired 802.1x setup using PEAP-MSCHAPv2 against our ACS (recently updated to 5.8) which works fine. A new requireme...

des.mckee · 12-11-2008

Hi,I am trying to use VACLs with MAC access-lists to restrict IP traffic. My test box is a 3750-E and after much frustration I found the following in the documentation:All non-IP protocols are access-controlled through MAC addresses and Ethertype usi...

des.mckee · 10-24-2008

Hi,Can someone answer this basic question? I cant seem to find that much documentation on the inline modules.Can you confirm whether or not devices can see each other on layer 2 across the two groups of an inline WAAS Ethernet module? i.e., if I have...

des.mckee · 02-18-2016

Thanks. What I'm trying to do is make a decision at the ACS layer.If the incoming request is mschapv2, authenticate internally.If the incoming request is eap-tls, send it to an ISE to authenticate.Cisco SE pointed me towards using ISE as a radius pro...

des.mckee · 02-17-2016

Hi,thanks for the response.If i define the ISE as an external Radius proxy service, i dont seem to have the usual options (or any options). I can choose what external proxy to point it at, and i can inject or strip Radius attributes. I dont have the ...

des.mckee · 12-11-2008

Thanks. I was given the link i needed for the 6500 and it seems its the same - cannot filter normal IP traffic using a MAC access-lists, only the other ethertypes or malformed IP packets:http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/1...

des.mckee · 11-04-2008

If you want to do it that way you could track a route on the MPLS router to that next hop - basically ping 10.x.x.12 and if it doesnt respond remove the route from the routing table and use the backup route to the ASA:so rtr 1 type echo protocol ipIc...

des.mckee · 11-03-2008

1. Yes, its possible, but if you mean can you make it so that the tunnel only activates when the MPLS fails then I wouldn't recommend that. You are better going with both MPLS and tunnels up at the same time, which leads toâ€¦2. Yes, they can both be...

Member Since	‎10-07-2008 07:20 AM
Date Last Visited	‎01-22-2021 12:09 AM
Posts	13

User Statistics

User Activity

ACS - internally auth MSCHAPv2, Radius Proxy for EAP-TLS

VACLs with MAC access-lists?

WAAS inline deployment options

Re: ACS - internally auth MSCHAPv2, Radius Proxy for EAP-TLS

Re: ACS - internally auth MSCHAPv2, Radius Proxy for EAP-TLS

Re: VACLs with MAC access-lists?

Re: VPN as a redundant link for MPLS

Re: VPN as a redundant link for MPLS