Network Access Control

Hi everybody, I have a problem configuring ACS 5.3 Cisco with IDM LDAP Novell. I need validate users in LDAP that is not in ACS for can migrate to LDAP. I redirect the request of the ACS to LDAP, but I send me the next error:     I delete the user in...

Hi Community,First off, I've got an open TAC case on this and will post if I get a solution, but I've had luck here in the past so here goes!We're experiencing aaa authorization slowness (experienced by a 5 second delay per command on the CLI of the ...

Greetings, Can anybody comment on this upgrade plan? We have 4 nodes:1 - Primary Admin/Secondary MnT2 - PSN only3 - PSN only4 - Primary MnT/Secondary AdminWe know the upgrade order will be 4 - 3 - 2 - 1. We are testing this in the lab and will perfor...

Hello All,                 i am trying to configure 802.1x on Cisco 3750 switch, my radius server is on windows server 2012 R2. wireless clients are authenticating through that radius server. after configure 3750 and tried to connect a wired client (...

we would like to know how to migrate sha1 to sha2 certificate?

Hello,  I am trying to configure a dual SSID onboarding scenario with ISE 2.0. I was following many guides, that make an authorization policy catching MAB and the Provisioning WLAN, and use a result of CWA.  In all the examples I found, the result us...

Hello , I want to learn authentication limit per second  for one psn node . I sometimes see ' High Authentication Latency ' and ' High Load Average' alerts . What is the limit for the alerts and authentication request for a psn ? Many thanks.

Current State: 2x Admin Nodes 2x Monitoring and Logging Nodes. 2x Policy Nodes (Clustered) Environment is running using self-signed certificates (copied from all nodes to all other nodes). Future State: I want to replace the self-signed certificates ...

In ISE 2.0, does it have ability to force a authenticated guest to switch to a different and hidden SSID? Specifically, a guest user connects to a open SSID and authenticates via CWA using their AD account or sponsor created account, then ISE force i...