Network Access Control

Hi all, My eap-tls authentication and authorization policy do not work , this my rule: Authentication:WIREDDEVICE:Device Type EQUALS Device Type#All Device Types#Swicth CiscoANDRadius:NAS-Port-Type EQUALS EthernetAuthorization:WIRED-MACHINE if (Wired...

Hello, If I am understanding correcity "Certificate authentication profile" in ISE is used to perform certificate authentication from external identity source like AD or LDAP. I am wondering when does "certificate store certificates" are brought into...

Hi, For ACS 5.x is it possible to export config/device lists on any 5.x and import into a later 5.y ACS version? Example: export configuration on ACS 5.x and import on a 5.8. Thanks Regards

Join us now for a live session where Pete Davis will be presenting about what's new with Cisco AnyConnect!

Hi,I am getting below error:Auth-server group TACACS+ unreachableany solution please.. 

Hi everyone!A reminder to bring your questions for our AnyConnect Licensing Ask the Experts on December 2nd from 6am-6pm Pacific Time.Our experts are ready to engage in conversations with you about:What’s new with AnyConnectHow to upgrade and what of...

Hi, After implementing ISE, we are unable to authenticate to the SSL VPN Web Portal using ISE and RSA. Our setup is as follows, our Cisco 5545-X vpn concentrators make a call to ISE when a user log in, then ISE is a client of our RSA server for rad...

People, I have ACS version 5.6.0.22.2. I have to do an adjustment on the parameters found under Access Policies >  ... >  Access Services >  Default Network Access >  Identity : "If authentication failed" and "if user not found". Whenever I change on...

Hello,I have a customer with only Apple iMac and Macbook pro as computers. I have to configure dot1x authentication on 3650 and 3850 switchs. Here is the template I use on each port (129 : vlan data, 132 : vlan guest): switchport mode access switchpo...

Is the ACS authentication in its local database encrypted or not? I mean if you are not using any  TACACAS , AAA  or active directory server  with ACS ,use its internal database  what are authentication types and are they encrypted? Please send me do...

Dear All, I have configured the SCP on Cisco routers and switches, enable the below command for SCP as per below article. aaa authorization exec default group tacacs+ http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/xe-3s/a...

I'm dealing with ACS 5.7 and mobile APN authentication with RADIUS protocol. I would add the RADIUS attribute calling-station-id included into the Access-Request as authentication element. So that the user authentication is based on username/password...

Hello, Since yesterday I've been getting some High CPU alerts from our ACS appliance. We have a 5-7-0-15-1 version, but I havent been able to identify what is consuming all the CPU. Does anybody know how to identify what is consuming the CPU in this...

Hello Cisco forum, I'm new to the Forum, and I'm having some difficulty getting my 7921's connected to an 802.1x \ EAP-TLS SSID. I can generate the CSR on the handset, and then get the output into the web page of a windows cert server to generate t...