About steffen.bodensohn@heraeus.com

steffen.bodensohn@heraeus.com · 02-20-2024

Hello everybody,we have ~1000 catalyst switches in our network which are operated by 4 people. We use a template to deploy switches but I´m searching for a Software that helps me to ensure that the configuration is compliant .For example I want to kn...

steffen.bodensohn@heraeus.com · 08-31-2022

Hello everybody, we are currently testing Softwareversion 17.06.3 and see log messages on the switch from "Switch Integrated Security Features (SISF)". I guess those messages are related to device-tracking or dhcp snooping. %SISF-4-ENTRY_BLOCKED: Ent...

steffen.bodensohn@heraeus.com · 07-06-2022

Hello, has anybody made the experience that ODBC lookups might lead to "High Authentication Delay" on ISE PSN Nodes ? And has anybody a possible solutuion for that potential issue ? We have an ODBC connection to lookup MAC Addresses for NAC. Yesterd...

steffen.bodensohn@heraeus.com · 08-22-2020

Hello, we are currently working to implement dot1x / NAC and have a problem with USB C-Dock´s.My colleauge from our client team wants to rollout the supplicant configuration via script that activates dot1x on every network card adapter in Windows 10....

steffen.bodensohn@heraeus.com · 02-07-2020

Hello, we have a strange issue regarding DHCP snooping on C9200 with IOS-XE 16.12.02.It seems that ports with connected Meraki AP MR16 or MR72 DHCP Snooping is not working. Feb 7 10:21:21.868: DHCP_SNOOPING: process new DHCP packet, message type: D...

steffen.bodensohn@heraeus.com · 02-20-2024

That was not what I meant I want to have a tool that compares text (configuration template) with the configuration of all 1000 switches automatically.So for example I want to know if everyhere the SVI´s are configured correct in respect to our templa...

steffen.bodensohn@heraeus.com · 10-04-2022

Hi TomBaz83,we figured out that those messages were caused only on ports to Accesspoints (we only use Meraki AP´s). We deactivated device-tracking on those ports and the message was is gone (trusted-port, device-role switch). We had the feelding that...

steffen.bodensohn@heraeus.com · 09-01-2022

C9200-48PWe migrated two switches in production environment to 17.06.03 and both Switches are logging the same. Device-Tracking policy is as following for "host" ports:device-tracking policy DEV-TRACKINGno protocol ndpno protocol dhcp6no protocol udp...

steffen.bodensohn@heraeus.com · 08-31-2022

Yes, we know this article.But we don’t use IPv6 and also disabled protocol dhcpv6 learning in device-tracking policy already. would be great to know the command to checke size und utilization of the binding table.best regards

steffen.bodensohn@heraeus.com · 07-08-2022

Thanks to all your answers. We investigated further with our partner and can confirm that non-reachable obdc caused the latency issues. We are using ISE 3.0 Patch 5. There seems no solution on ISE itself but maybe to put the db behind a loadbalancer...

Member Since	‎01-26-2012 03:15 AM
Date Last Visited	‎03-01-2024 12:02 AM
Posts	22
Total Helpful Votes Received	29

User Statistics

User Activity

Software to ensure configuration compliance ?

%SISF-4-ENTRY_BLOCKED- IP Device-Tracking causing issues ?

Cisco ISE - High Authentication Latency (Cause ODBC ?)

Dot1X supplicant configuration for USB C-Dock on Windows 10

DHCP Snooping failing on C9200 // IOS-XE 16.12.02

Re: Software to ensure configuration compliance ?

Re: %SISF-4-ENTRY_BLOCKED- IP Device-Tracking causing issues ?

Re: %SISF-4-ENTRY_BLOCKED- IP Device-Tracking causing issues ?

Re: %SISF-4-ENTRY_BLOCKED- IP Device-Tracking causing issues ?

Re: Cisco ISE - High Authentication Latency (Cause ODBC ?)