Cisco Cisco ISE Admin access with AD Account What if I tell you that only 3 out of 10 users use AD for ISE admin login (trust me, I just didn't make that up) Generally, local admin account is used to log in to the ISE web GUI and CLI. In this blog post, I will explain how
Cisco Cisco ISE patch Install Example Cisco releases ISE patches occasionally, like 3 or 4 patches a year for each version. The patches contain bug and security fixes. When you install a patch on an ISE node, the node is rebooted and all the services are restarted. The patch installation might take a few hours to
Cisco Cisco ASA Site-to-Site VPN If you are reading this blog then it is more likely you are looking to get some assistance with configuring VPN on the ASA. What if I tell you that configuring site-to-site VPN on the Cisco ASA only requires around 15 lines of configuration. Better yet, you may only need
Cisco Cisco ISE Log4j Patch Installation CSCwa47133 If you haven’t heard about Log4j vulnerability, then you must have been living under a rock for the past few weeks. Cisco was quick to release the hot patch for the ISE and you can download it from the usual Cisco download page. You need to download the following
Linux 6 Tcpdump commands for Network Troubleshooting Want to identify the Network Traffic that is going in and out of a Linux system? Have you ever wished you could just use a couple of commands on Linux and prove 'this is not a network issue'? Tcpdump is a Linux command-line utility that allows you to capture and
Linux Raspberry Pi as a router using iptables I have a Raspberry pi 4 which I solely use to block ads using Pi-hole. I recently came across a situation where I needed to create a separate network for my home lab which also requires Internet connectivity. There are many ways to accomplish this task but for me using
NetDevOps Ansible with Cisco - Variables PrerequisiteThis blog post assumes you have a basic understanding of Cisco devices and Ansible. If you are not familiar with Ansible, I highly recommend reading my previous Ansible introduction posts here: Ansible and Cisco ExampleI will show you the step-by-step guide to Install Ansible for basic Network Automation. This includes
NetDevOps Using Ansible with Vagrant If you are not familiar with Vagrant, I highly recommend reading my previous Vagrant Introduction post here. Vagrant for NetDevOpsThere were many situations in the past where I had to quickly set up a Syslog or a Radius server to test and troubleshoot something on my Network.PacketswitchSuresh VinasiththambyVagrant supports
NetDevOps Vagrant for NetDevOps There were many situations in the past where I had to quickly set up a Syslog server or a Radius server to test and troubleshoot an issue on my Network. I usually end up downloading Ubuntu/CentOS ISO, adding it to VirtualBox, configuring the IP and then installing the required
Cisco Configure F5 TACACS+ authentication against Cisco ISE OverviewYou can use TACACS+ to authenticate and authorize users into the F5 BIG-IP system which eliminates the need to configure and manage local user accounts. The goal here is to make sure that the administrators can log in to F5 using the TACACS+ protocol where the ISE authenticates the user
Cisco Configure Palo Alto TACACS+ authentication against Cisco ISE OverviewYou can use TACACS+ to authenticate and authorize users into the Palo Alto firewall which eliminates the need to configure and manage local user accounts. The goal here is to make sure that the firewall administrators can log in to Palo Alto using the TACACS+ protocol where the ISE authenticates
Cisco APC Radius authentication with Cisco ISE In this blog, I will show you how to use Cisco ISE to authenticate users into APC Network-enabled devices such as PDU or UPS using Radius. Radius Vendor-Specific Attributes (VSA)There are various dictionaries created for different vendors and attributes can be added to each of these dictionaries. Each attribute,
Cisco Cisco ISE config-backup failure SymptomDo I like Cisco ISE, yes. Do I like fixing never-ending ISE bugs, absolutely not. When you try to take ISE config-backup, the following error occurs and the backup process fails even though there is sufficient disk space available. status: Error: The data filesystem is 77 percent full, which is
Cisco Cisco IOS-XE Built-in Packet Capture The Embedded Packet Capture feature was introduced in IOS-XE Â 15.2(4)S. This enables us to easily take captures directly from the switch and export them for analysis. The process is very straightforward and only takes a couple of minutes to set it up. Once you configured the capture,
NetDevOps Using Python to resolve multiple hostnames to IP addresses As a Network Engineer, I work with IP addresses all day long. But most of the time I am handed out hostnames rather than IP addresses to work with. I can of course use nslookup or ping to quickly resolve the hostnames to IP addresses but imagine having more than
Cisco Cisco IOS-XE RSPAN configuration example RSPAN copies all the traffic that comes in and out of source ports or source VLANs to a destination port on a different switch for analysis. RSPAN does not affect the switching of traffic on the source ports or VLANs that are being used. This blog post shows an example
Cisco Cisco C9300 switch stack IOS-XE upgrade This post describes IOS-XE upgrade on C9300 switch stack with five members. The switch is currently running 16.9.4 and will be upgraded to 16.9.7
Cisco Cisco FMC HTTPS certificate with OpenSSL ProblemYou want to install HTTPS certificate for the Cisco FirePower Management Centre (FMC) SolutionI already have an Internal CA certificate created with OpenSSL. You only need two commands to create one for you. #Generate private key openssl genrsa -des3 -out internalCA.key 2048 #Generate root certificate.You need to create
Cisco Cisco ASA syslog with Splunk In this blog post, I will show you how to send and visualize Cisco ASA syslog in Splunk. Splunk is used to search and analyse the data/logs generated from various devices. As you can see below the syslog generated from the ASA are unstructured and complex to understand. You
firewall Palo Alto NAT Example In this blog post, I will show you how to configure NAT on Palo Alto Firewalls. One of the main functions of the NAT is to translate private IP addresses to globally-routable IP addresses, thereby conserving an organization’s routable IP addresses. NAT examples in this section are based on
NetDevOps Palo Alto and Ansible Example In this blog post, I will show you how to use Ansible to deploy configurations to the Palo Alto Firewalls. Setting up the environmentI'm using Ubuntu 18.04 server for this example. Ansible Galaxy Role pip pan-os SDK Palo Alto Networks Ansible Galaxy Rolehttps://ansible-pan.readthedocs.io/en/latest/ The
NetDevOps Network Configuration Backup with Ansible and Git The typical way you would perform Network Configuration Backup is by using NCM software such as Solarwinds NCM, Rancid, Oxidized etc. However, you can also utilise Ansible and Git to perform the backups. I know it sounds silly, why would anyone do it? But believe me, it requires very little
Terraform Terraform VPC example with for_each loop On my previous post, we used count parameter to deploy multiple resources of the same kind. This method may cause some unintended results. Let's take a look at the route table as an example. You can check out my previous post here: Terraform AWS VPC ExampleTerraform is a tool for
Cisco Cisco 9300 IOS upgrade and Smart Licensing IntroductionThis blog post describes how to upgrade Cisco Catalyst C9300 Series Switch using Install mode. The example shows the upgrade procedure for a C9300-48P switch upgrading from 16.6.3 to 16.12.4. Please note that devices running IOS-XE starting from 16.9.x requires smart licensing.The image
aws Setup AWS Network Firewall What is it?AWS Network Firewall is a managed firewall service for our VPC. We can use Network Firewall to filter traffic at the perimeter of our VPC. Network Firewall includes filtering traffic going to and coming from IGW, NAT Gateway, VPN and Direct Connect. Network Firewall components Firewall Firewall
