|
|
11
« Last post by MC on March 18, 2024, 07:51:20 PM »
Endpoint DHCP should always sent/received on an overlay and why you need IP Transit to allow packet to get to a DHCP server outside of the fabric.
12
« Last post by MC on March 18, 2024, 07:49:26 PM »
LM-PXGRID is a standard web cert template with both client and server authentication so DNAC can connect to pxGrid. Once created, don't forget to publish it. From what I recall, the openssl.cfg should be included with an installation. If not, you can just grab one off the internet.
13
Hi, I watched your videos on SDA transit between multi sites. Does it mean that when end point is sending DHCP request it goes over underlay, and DHCP offer goes over overlay? Thank you.
14
How did you create the LM-PXGRID template and where did you place it so it will be listed under Certificate Template in CA. Also, I downloaded and installed openssl (from sourceforge) but there where no openssl.cfg file in the bin directory. How can I resolve these two isssue so I may continue.....Thanks
15
« Last post by MC on February 06, 2024, 07:56:10 PM »
Cisco now offers Catalyst Center VM on ESXi but it has limited availability so check with your account manager. You can try to install a VM on your own using the official ISO but you will need to have comparable hardware resources and result is not guaranteed.
16
« Last post by MC on February 06, 2024, 07:51:48 PM »
It depends on which video series you are referring to. All lab videos were created with actual hardware but you may be able to rebuild them in a system like GNS3 or EVE-NG although it won't exactly match what are in the labs.
17
I want to be able to mock up your SDAccess/DNAC videos in my home lab, looks like you used a physical appliance. Have you done anything with DNAC on ESXi? Iv'e seen a few videos on it but not sure, if you have any experience would you mind sharing? Thanks,
18
I really liked your videos , Great content, How to practice the labs you have setup in the course videos ? please help and guide
19
« Last post by MC on January 23, 2024, 10:45:24 PM »
So are you doing client cert auth or SAML auth or both using secondary authentication? When you enroll a cert on FTD, it forces you to install CA cert anyway, so unless client cert is signed by a different CA, you do not need to import it again.
20
« Last post by clemish on January 23, 2024, 03:32:41 AM »
I determined that using the ISE Computer/User auto-enrollment cert methodology, my domain computers authenticate with Duo SSO/SAML 2.0 no problem. Non-domain computers have the issue. Upon visiting sslshopper, entering vpn.domain.com the certification path requires an Intermediate CA/Sub CA for this to work. I'm building the Sub CA to satisfy this requirement. It looks like the non-domain computers require both the Root CA certificate imported into the Local Computer > Trusted Root Certification Authority and the Identity certificate is imported into Personal > Certificates which was completed, however, in the FMC, the process was to take the contents of the Root CA paste into the Manual certificate textbox and then generate a CSR from the FMC, which I thought would remove the need to import the Root CA. I'm not sure if you have any thoughts on that. I'll let you know the results after installing the Sub CA.
|
Recent Posts