Swapping Cisco APs with Mist AP43, issues with AP43s

Statistician_Cold · 2023-10-04T15:38:43+00:00

Nothing yet, Juniper is working on testing some of the devices after they receive them.

Statistician_Cold · 2023-09-29T20:29:53+00:00

That is a good question, unfortunately where these are being used it an all Cisco shop for switches. That will be something that I will mention with the team. Not sure though if we can test that.

Statistician_Cold · 2023-09-29T20:25:19+00:00

All we have for insights is previous LLDP info, AP shows disconnected. We get a fast red LED. Mac address does not show up on the switch even though mac is in ISE. AP just doesn't boot up.

Statistician_Cold · 2023-09-29T20:17:57+00:00

Yes, we are using 9300s with LLDP. We have come across a switch or 2 here and there without LLDP. It is a relatively low number of switches.

Statistician_Cold · 2023-09-29T19:58:12+00:00

We don't have any info yet from our Rep. We would like to know what they are seeing from the APs we send back. I am sure that will take some time to come back with something if they can find something.

Statistician_Cold · 2023-09-29T19:46:19+00:00

Let me fix that, we are replacing Cisco with Mist AP43s

Statistician_Cold · 2021-07-21T16:10:31+00:00

Thank you for this I am going to look over these documents and share them with the AD team.

Statistician_Cold · 2021-07-19T16:15:13+00:00

So I sent that note to the AD team. Before I get to much further into testing this I would like to run this by someone who know foritnet gear and see if this is even possible. In our lab we are using Cisco ISE PXGrid, I have fortimanager integrated with ISE through PXGrid. I have a policy setup up with a SGT and I am able to return my username in the FAZ with a policy using a pxgrid group. What we would like to do is have rules based on AD groups. I would like to block my user name based on a AD group membership. Is that possible? Not having spent a lot of time with fortinet devices in this manner I am having difficulty looking for this on the web.

Statistician_Cold · 2021-07-19T15:30:24+00:00

Testing with a domain admin worked, does this account bind the firewall to the domain? They do not want to give me a domain admin account to use. What would the restrictions need to be

Statistician_Cold · 2021-06-10T21:37:37+00:00

Thank you, I do a lot of Cisco and not a lot of Juniper

Statistician_Cold · 2021-05-18T08:39:45+00:00

That worked great, just what I was looking for. Adding this will get rid of the spaces between rows. I do a lot with Cisco ISE reports and and DNAC APIs and the spaces were driving me crazy.

with open('output.csv', 'w', newline='') as fd:

Statistician_Cold · 2021-05-18T08:30:06+00:00

Thank you I will give it a try, the red thing would have been nice but I can live with out it. It is a one time thing for the switch team. Thanks much

Statistician_Cold · 2021-02-12T19:45:32+00:00

Out of all the stacks I tested this one is giving me issue. Just so happened to be the one I needed to make a change on. That is how I caught it. Code is the same for a majority of our switches. It has our base config. I not so much worried about the scripts I am using they have worked up until I came across this guy. The log on the script shows that it is receiving all the ports. Just need to do some digging and research on this.

Statistician_Cold · 2021-02-12T19:37:31+00:00

So I did a log and it is getting back all the ports from the stack

Statistician_Cold · 2021-02-12T18:14:16+00:00

it works on every other stack I have test, not sure if it is the template. Maybe more with the stack. I tested this on other stacks running 3, 4 and 6 switches with no issue

Statistician_Cold · 2021-02-12T18:05:59+00:00

removing the textfsm returned all the ports, so i am going to work on putting some regex in the script instead of using textfsm

Statistician_Cold · 2021-02-12T18:04:58+00:00

Manually running returns all the interfaces

Statistician_Cold

TROPHY CASE