Network Access Control

In ACS 5.4, the CLI command ip name-server, you can specify up to 3 IP address for DNS. It's my understanding the first IP address is the first choice, the 2nd IP is the 2nd choice, etc. I had an issue where connectivity to the first IP address of th...

Hi, I have a Radius server wich has to authenticate users in order to allow them a connection on routers. In this case, each router is a NAS(Network Access Server). A fallback method, has been defined in startup&running configuration.I try to find a ...

Hi friends,I have a task to tacke on four ACS 3400 appliances.The goal is to 5.2 to 5.5 via 5.4For the 5.4 upgrade it to 5.5 straight.The upgrade is the first step follow by importing the backup cfg onto the new boxesLooking into ISO and Bootable USB...

hey all,is it possible to restore a backup taken from a physical appliance to a VM?if so, what about the license? i cannot import the old license since its for an applianceam ending up with this:Invalid license file, UDI mismatch: Platform UDI: "ISE-...

Hello I have been tasked with creating a RO access for a single user on ALL my network devices. I have Cisco Secure ACS 5.3I use TACACS.  Where/how would I create the user RO account that would push this out to all network devices?

Hi everyone,Our acs produce the following message recently: "Configuration management could not translate configuration change, runtime configuration changes will not take effect"The code id is 31106, I don't see any resolution for this issue until n...

Hi,Devices:ACS 5.4.4.46.0aWS-C3550-48 with IOS c3550-ipbasek9-mz.122-25.SEB1.bin When I was adding the switch above on ACS, I used 16 characters of shared secret and used it on the TACACS switch configuration as the key. Tried to login to the switch ...

Hi, we are getting internal error 500 when we are trying to do guest portal on port 8443 and even after changing it it coming the same.i have tried to restart the service after changing the port number. I am using ise 1.3 patch 4.Is there any bug or ...

HiIs there a way to do location based authorization rules in the ISE. We need that for giving out different authorizations to VPN users based on their location they are connecting from. RegardsRoberto

Hi Support Community,Probably a very stupid question!I have an 8 node (2 x PAN, 2 x MnT, 4 x PSN) virtual ISE deployment running 1.2.0.899 and last year I stupidly forgot to change the initial default 45 days password expiration.This meant I was lock...

Hi All,Two of my ISE nodes (in an 8 node 1.2 deployment) have expired CLI admin passwords (I know I'm stupid!)One is the Secondary MnT node and one is a PSN node (1 of 4).I have information on what I need to do to get a new password but do I need to ...