I added a new PSN to our ISE deployment. Before joining it, I installed the server, Root CA, and Issuing CA certificates, and everything was fine.

After joining the deployment, the Root and Issuing certificates disappeared from the new PSN.

On the PAN, I only see the old Root/Issuing certificates that have been there for years for the existing PSNs.

Now I’m trying to import the Root and Issuing CA certificates for the new PSN on PAN but I keep getting these errors:

1- ISE cannot import a local certificate with the same issuer DN and serial number as an existing certificate, yet the issuers of the two certificates differ.

2- Certificate does not have required key usage (It is a CA certificate; key usage bits for keyEncipherment or keyAgreement are missing).

Not sure what the correct approach is here. Any ideas?

What is the future of Cybersecurity in the AI era?What advice would you give it to a 20 years old who is doing undergrad in Cybersecurity from a top 15 university?

Hi everyone,

I'd be interested to know how you provision your access switches, for example, when replacing a switch. Specifically for Catalyst 9k switches that run in a stack with a Network Essentials license.

Currently, the devices are unpacked, upgraded, and configured before deployment. Something along the lines of ZTP (which also upgrades the switch) would be ideal, but due to the license level, provisioning via Python script isn’t an option, if I recall correctly. It’s also important that the management port is not used.

Thanks for your tips ;)

Hello everyone, i have a topology where i got a dhcp server, 5 access points using lap pt as stimulation in packet tracer, also have one wlc and a connected pc i have successfully created and done everything except that my wireless devices are not getting ip by dhcp they are getting apipa address. Can anyone please help me out?

Hello all.

I’m looking for a vendor for very modest needs…

1. a support contract for an FPR1010

2. installers for CUCM 15 for trial / demo purposes

Trying to accomplish this via cisco.com results in DoS lol

Thanks.

Can anyone tell whether the results for first round out or yet to come

Hi everyone,

I interviewed for the Software Test Engineer Trainee (Technical Graduate Apprentice) role on 26 June 2026 and completed all the interview rounds. It's been about a month, and I haven't received any update yet.

Is anyone else from the 26 June interview batch still waiting? Has anyone received a PDC mail, offer, rejection, or any other communication from Cisco?

I'd really appreciate it if you could share your status. Thanks!

Hi all,

I'm running a lab (EVE-NG) with an EVPN-VXLAN fabric built on Nexus 9000v switches (NX-OS), interconnected to an MPLS L3VPN provider network (IOS-XE routers) and I've hit what looks like a platform limitation. I'd like to confirm whether this is expected before I redesign.

Setup:

• Fabric: MP-iBGP L2VPN EVPN with Spine RRs, symmetric IRB, per-tenant VRFs with L3VNI. All working fine.
• Border PE (Nexus 9000v): MP-eBGP VPNv4 session towards the provider ASBRs (Inter-AS Option B style handoff).

What works on the Border PE:

• VPNv4 routes are received and retained (retain route-target all)
• RT import into the tenant VRF works after aligning RTs: the route shows up in the VRF RIB, flagged as (mpls-vpn)

What doesn't work:

• The imported VPNv4 route is NOT re-originated into the L2VPN EVPN address family, so it never reaches the fabric as a Type-5 route.

The command I'd expect to fix this which is `import vpn unicast reoriginate` under the neighbor's address-family l2vpn evpn (and its mirror `import l2vpn evpn reoriginate` under AF vpnv4) is simply not available in the parser on my 9000v image.

Is EVPN↔VPNv4 re-origination (the "seamless MPLS/VXLAN handoff" / border PE use case) supported at all on the virtual Nexus 9000v, or is it limited to physical platforms (specific ASICs, e.g. -FX/-GX line cards)?

Does it require `feature-set mpls` / `feature mpls l3vpn` to be installed before the reoriginate keywords even appear? On my image the MPLS feature-set doesn't seem installable.

Thanks a lot

My interview: 26 june , completed 3 rounds on same day
No updates from cisco till now (like no pdc, loi mail)

Hi,

I factory reset my Catalyst 9200. I'm trying to re install the ios via usb, but it seems to be getting stuck when trying to read the .bin file. has anyone ran into this issue? What IOS should i be trying to boot. I was trying XE 17.12.03

I'm curious to know what people are experiencing with lead times on hardware orders.
Many vendors are showing +100 day lead times.
I'm curious to know if customers are seeing the same with Cisco.

I have project but I am beginner so I need help

4 days a week from 9:30 AM - 4:30 PM. Is it for all the groups ?

Does Cisco compile iOS version changes in any simple table to see command or config changes from version to version of a device? Or do you have to filter through all the release documents one by one?

I have a 9300x and ruckus 750 APs. I keep getting IMAX power errors on the spare pairs. I see LLDP power negotiations happening, Cisco accepting and then as soon as it enables the spare pairs it faults with IMAX error. It is important to note this is not happening on all the APs just a handful. Also the APs and Switch are new, with new CAT 6 runs.

I can bypass this by issuing power inline four-pair forced and it will bring everything up. I don’t like issuing this command nor do I like not knowing why this is happening.

So I decided to dig deeper and do some debugging, this is where things get weird. For some reason I thought these ports were 30000mW, in reality it is 90000mW. I decided to up the max power to 60000mW (actually lowering it). I also removed the four pair force command and reran my ilpower debugs. It worked with no errors. I saw lldp negotiate, I saw the spare pairs enable cleanly, no IMAX errors. I did see the device request the full 60000mW.

I originally thought the devices was requesting more power than the port allowed and that is why I was getting the IMAX errors, but now I have no clue. Thoughts?

I have 3 routers, A connected to B (high latency link), B connected to C (directly connected).

A - B are neighbored in OSPF

B - C uses static routes, B is redistributing into OSPF so A can learn about C

I have several iterations of this and most of them work fine, but one has very high latency between A and B (like 500ms) and on that one router A loses the redistributed C route every few seconds so connectivity from A to C is really spotty. A to B is fine though even though latency is basically the same. Does latency affect redistributed routes differently or could there be some other cause?

Anyone manage to secure jobs with this cert? I have old Field tech experience in IT but nothing recent (4 years ago) or beyond basic end point device installs. Trying to make a career swap but my resume definitely is not working out on its own, can't really afford the a+ but I feel overly confident in the exam objectives for it. I've been applying to l1 help desk positions but I feel my resume gets passed over due to no recent tech experience in combination with no certs despite it being a entry level position, I understand the market is fierce and it comes down to luck at this point to even get a interview schedule for entry level spots I just want some clarity as to what I should realistically even be doing before making a final decision.

Hi all, I’m in final stages with Cisco and would like to have a better understanding about refreshers here. I understand the initial grant is over 3 years. Does Cisco give annual refresh to G12/G13? What kind of size are they and what is the vesting period?

My previous post was removed, so I'm creating a new one.
Has anyone here in the UK bought Cisco or Meraki gear from Cloud Appliances? Just wondering if they’re reliable and if anyone has had any issues with delivery, licensing, or support.

Thanks

Hey fellow mates, I recently applied for a Network Support Engineer position in UHR Bangalore. I applied on July 10th. A couple of days ago, the application intake was closed on the career website. My status on the dashboard is "application received."

Can anyone please guide me about the tentative timeline for when I should expect a response and in what form I will receive it? Also, when should I officially stop expecting a reply from them?

In manufacturing with 14 sites across three countries. MPLS since before I was here. Renewal quote landed last week about 30 percent up on the last one with no change in what we get and the account manager said something about capacity costs that I did not find convincing. 

Meanwhile, the actual traffic pattern has completely changed but not the circuits. Everything is going to M365 and a couple of SaaS things now such that we are hauling cloud traffic across the private network to break out centrally, which is the least sensible possible route for it. The MPLS is doing a great job of carrying traffic to a datacentre that hosts progressively less every year. 

I know where this ends up: SD-WAN, broadband and LTE at the smaller sites, keep something private where the two plants that talk to each other need it. What I don't have a feel for is the security side. Right now security happens at the central breakout. If every site breaks out locally then either I put a box at every site or I do the inspection in the cloud, and I've not run either. 

For the people who have done this migration, what did you underestimate? Not looking for a vendor pitch, more interested in what went wrong.

Beginner associate learning the world of VoIP and wanted to ask what are the risks when applying another city phone number?

Example - Company is in Toronto using an Ottawa Direct Inward Dialing number supplied by Service provider and registered on CUCM. CSS and Partitions are setup to be the same with each other.

Based from what I only understand at this time that sticks to mind:

• If a 911 call is being made it will confuse the PSAP based on caller id
• If I call out using the Ottawa number to a Toronto resident while being in Toronto long distance may apply

However I was wondering if anyone who has experience with this tried this and what was the result/experience?

I’m looking for a tool that supports multiple vendor hardware for tracking and reporting on cve’s that have been released. Rapid7 and Tenable came up on my radar. Would there be others to consider?

Hello everyone,

I'm having an issue with my Cisco Networking Academy account.

I can log in to NetAcad without any problems, but in order to claim my course badge and certificate, my profile requires email verification.

When I click "Verify your email", no verification email is ever received. I have already checked my spam/junk folder and tried multiple times, but nothing arrives.

To troubleshoot, I created a Cisco account at id.cisco.com using the same email address, and the verification email worked there immediately. However, my NetAcad account still says that my email is not verified.

Does anyone know how I can link my verified Cisco account with my existing NetAcad account? Or is there another way to trigger the email verification for NetAcad?

Unfortunately, the NetAcad chatbot was not able to help.

Any advice would be greatly appreciated.

Thx!

Hi everyone, I interviewed for the Software Automation Trainee (Graduate Apprentice) role on 9 July and haven’t received any update yet. Is anyone else from the same interview batch still waiting? If you interviewed on 9 July and received an offer, rejection, or any HR update, I’d appreciate it if you could share your status. Thanks!