Networking-Notes

  Go to Administration-System-Maintenance and select Repository Add new repository and complete the required fields After this the setup need this additional command to work You have to login through cli and run the below command ise/admin# crypto host_key add host 10.10.10.10 Where 10.10.10.10 is your SFTP server Thanks to https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/215348-how-to-configure-repository-on-identity.html#toc-hId--287746172

SECURITY WSA //Check WSA authenticated Users //authcache Then select LIST option ISE //Check restore status for backup and restore procedure // show restore status (here i wish you this command to finish and not stay forever in progress) //check process status // show application status ise //restart ISE application // application start ise //Add SFTP command// crypto host_key add host 10.10.10.10 //Rset ISE GUI password  application reset-passwd ise <username-here> //Factory reset cisco ISE from cli  // reset-config Copy From FTP  //copy ftp://cisco:cisco@10.10.10.10/C9800-CL-universalk9.17.09.03.SPA.bin bootflash:

  Check IP to User mapping on FMC expert user_map_query.pl -i 10.10.10.10 (to check for IP to user mapping) user_map_query.pl -u bob  (to check user to IP mapping) If results display "For policy = 1" then this is set to propagate to FTD Credit to my old colleague Panos blog  😊 https://nettechnotes.blogspot.com/2018/11/cisco-fmc-ftd-user-to-ip-mapping.html

Working on 2 ftds today, one those FTD2120 was continuously booting in rommon. At the beginning I didn’t realized that was confreg issue. Thus, I proceeded and fully reimaged the device. Once I reimaged on the reload FTD stacked again on rommon. Then I realized that was something wrong with confreg on rommon Running the help command I saw the confreg command Running the confreg I saw the below "Configuration Register: 0x00000000"   Then I run the command  confreg 0x1 from rommon rommon 9 >   confreg 0x1 You must reset or power cycle for new config to take effect   rommon 10 > reboot Restarting the system... After that everything was ok 😊

  Having a customer running FTDs managed by FMC configured for remote access vpn. The authentication is performed through LDAP.   Taking a request that they can’t login with anyconnect and the message login failed appeared. Then I resetted my own password from AD as I didn’t save it when I created it (if I don’t save it on KeePass then always need a reset). I tried to login with my credentials and I successfully connected.   Then I knew that the issue was with specific user. I checked the FW config and everything was there correctly!   Intead of resetting the password I proceeded with some debugs on the firewall to better understand and find the issue. Before that I connected on FTD cli then on system support diagnostic-cli    sho debug debug aaa authentication enabled at level 1 debug aaa authentication enabled at level 1 (persistent) debug aaa authorization enabled at level 1 debug aaa authorization enabled at level 1 (pers...

As a wireless engineer with focus in wireless I could say I am more than familiar with airos WLCs. My experience with installations troubleshooting and maintaining those WLCs I can say I feel very confident. As those WLCs now are going to be replaced with iosxe wireless controllers I need to learn those new platforms. Even I have attended lot of webinars, cisco live presentations and documentation, I can say that I was scare of this new model. I don’t know the reason. I found this new model difficult for me at the beginning. As I understand later on the key on this was my first installation. I had to study a lot to understand this model and deploy the customer needs. After even the first installation I have different opinion!   Conclusion: Even the philosophy its different between the 2 WLCs, an engineer with airos experience will not find it very difficult to understand 9800. A tip for the wlc is to navigate into wireless setup (right up corner) Choose advanced Setup. You will see...

  Today I had to upgrade an AIROS cisco 2504 WLC. After checking if the APs are supported by the new recommended version I noticed that I had to install the supplementary image also. The reason was that 1602i APs wasn’t supported by the main image in 8.5.171.0 version. Due to image size cisco created separate file for some AP images called Supplementary AP Bundle image. Procedure:   Step 1:   Check the current WLC image (Cisco Controller) >show boot Primary Boot Image............................... 8.3.150.0 (default) (active) Backup Boot Image................................ 8.0.152.0 Step 2: Upload the new image ( AIR-CT2500-K9-8-5-171-0.aes ) I did the below procedure via HTTPS. Verify (Cisco Controller) >show boot Primary Boot Image............................... 8.5.171.0 (default) Backup Boot Image................................ 8.3.150.0 (active) Step 3: Check Supported APs of the new version (Cisco Controller) >show ap bundle primary Pr...