dargnet-networks

 Installing Server Certificate in Cisco ISE In this post we will be installing a certificate from our Certification Authority. In this scenario, the CA is enabled in my Windows Server 2019 wich also is my DNS server and Domain Controller: The topology for this lab is as follows: 1.- Downloading the Root CA: Frist step is to navigate to the Active Directory Certificate Services Web Enrollment page: For my lab is https://172.20.55.99/certsrv I will save this cert as DARGNET_CA.cert 2.- Uploading the Root CA in Cisco ISE: The cert must be uploaded to the "Trusted Certificates" tab: 3.- Generating the Certificate Signing Request We will generate the CSR to be signed by our CA: I will add the IP address of the node, so in case my DNS server is down, the certificate will still be valid: We will need to export the generated CSR and open it in a txt editor: 4.- Signing the CSR: We will navigate again to our AD CA Web Enrollment page and will use the Request a Certificate link: Now we...

Flexconnect in Standalone Mode I recently came with a situation where a site with two old 2504 AireOS WLCs in N+1 redundancy with APs in Local mode lost one of the controllers. They were using both SSIDs with WPA2 Personal, and WPA2 Enterpise. The site was concerned about having a disruption if the remaining controller went down too.  During the conversation with the site I pointed out that on the Flexconnect mode, when using local authentication, the WPA2 Personal SSID would work, and although I personally never really tested it, I knew you can add the Radius servers to that configuration.  The site after finding an old 2504 WLC with licenses, finally opted for getting that old WLC and keep the existing configuration. That is probably the best option, since it doesn´t need any change, and moving to Flexconnect required testing and validation.  In any case, I wanted to test this solution for the WPA2 Enterprise (the WPA2 Personal I´ve tested in the past and I know it work...

TCL Shell in Cisco IOS XE The TCL Shell for Cisco IOS has been around since Release 12.3(2)T, so it's been around for quite some time now. Still, it remains a very useful scripting utility in certain scenarios. I do a lot of network migrations or upgrades, so I often need to do multiple tests to make sure that everything that worked before that migration still works after it. Here you can find the references: https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/ntw-servs/b-network-services/m_nm-script-tcl-xe.html Ping to different destinations: One of the simplest scripts you can make, and which is very useful when you have to verify that you reach several destinations, is the following: tclsh foreach VAR { A.A.A.A B.B.B.B C.C.C.C } {ping $VAR} I think it is a self-descriptive script, for each of the variables that we will introduce after the loop, ping will be executed. Below I show what output we would see in our switch: For very easy scripts like the previous one, you c...