Network Access Control

Today I was a customer site and I came across another challenge .. Customer has set up 3 VPN user profile ( i e SSL-VPN , IPSEC-VPN, Annyconnect-VPN) on ASA 5525. User authentication is via ACS 5.6 When user try connecting through annyconnect Secure ...

Hi all,  I want to ask some questions.  Currently I'm using Cisco ISE for dynamic vlan assignment based on group on AD.  The problem I'm facing is, the user will only get IP address after they put username and password in dot1x supplicant. But someti...

Dear all, when I enabled dot1x in our network, our Win7 clients worked fine with their certificates but the conference phones sporadic lose their connection to the call manager. If I shut the port and enable it again they register and work fine. The ...

Hello All,I was trying to do an ISE distributed deployment upgrade from 1.3 to 2.1The current architecture is:ISE-1: Primary PSN and secondary Admin nodeISE-2: Primary Admin, Secondary PSN and MNT nodeISE-3: Primary MNT nodeThe upgrade path followed:...

I work for a company that provides IT Network Services to a number of small businesses. We have roughly 30 sites that we support, all of which are on their own separate networks, which internally, have similar IP schemes (10.x.x.x). It's a constant s...

My question is this... What does TACACS/AAA use as its default source interface? I have a 4500 switch that is configured to authenticate through a ACS server with TACACS. The device is remote and I do not have the ability to access and enter the sour...

Hello, I have a problem with admin account for my ACS. Someone locked it out and now I cannot login and do changes. I`ve tried to boot ACS with recovery CD and reset password but it doesn`t reset login attempts. Some ideas how to reset this counter o...

Hi, Is it possible to use tacacs+ and TrustSec on the same device? I think that configurations of tacacs + can not set several TrustSec configurations. For example, pac key etc.

I'm working with a customer with around 50 locations and they do not want to centrally switch any traffic, including guest.  The challenge is that in WLC 7.5, the behavior of how radius-applied ACLs are used was changed.  In the WLC, you can manually...