Network Access Control

Hi all I am trying to deploy a new eap chaining authentication for machine and user authentication with certificate.   Tunnel EAP_FAST and authentication EAP_TLS   I would like to perform 4 policies: Machine and user has the certificate: It is workin...

Hello,i´m using ACS5.5. NEAT work fine. Is there a possibility to add a command when the port changes from access to trunk? Because cdp is not enabled when it is an access port. But when it changes to trunk i would like to enable cdp.Jan 17 11:39:09....

Hi everyone, I have problem when upgrading my ACS form 5.2 to 5.4 using Application Bundle I transfer using FTP Server. when it is done the message appear like this. Saved the running configuration to startup successfully% Manifest file not found in ...

refer : http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_23_transitioning_monitor_mode.pdf in page 10 "The limit of dACL support for Cisco switches is 64 ACEs (64 lines)."  -> 64 lines acl is mean per interf...

Hello,I just upgraded to ISE 1.2 and lost access to my two repositories. This was expected. I was able to get one of my repositories back by deleting and recreating it. I created it in the GUI and then ran the command "crypto host_key add "IP address...

Hello, I configured a CWA authentication on ISE, but the redirection of web traffic entered on client machine is not working. Here are the details: 1. Redirect ACL Extended IP access list ACL-WEBAUTH-REDIRECT    5 deny udp any any eq domain (520 matc...

HiI have ISE 1.2 and there an issue with windows remote access on the computerI use remote access to give assistance to remote userIssue description:The windows remote access  are possible as much as the user’s assistance does not required to switch ...

I have this printer HP LaserJet P4015 Printers has a PTR and I can ping -a on its ip and it response with its name.domain name  but I can't get this printer in its profile I get it just as hp_device  my condition is ip:FQDN contain domain name  it wo...

Hello, I have Cisco ISE runnining version 1.2.1.198, Client pc's looped via ip phones (Atcom AT810P and AT840P) do not do 802.1x authentication, they failover to MAB, but when i connect the same client pc directly the perform 802.1x authentication Pl...

Hello all, please I need switch (global - interface) configuration which is required in ACS 5.3  1) configuration required to run ACS to enable MAB (MAC authentication bypass) I defined MAC address of hosts in ACS internal database and I created a ru...

*SOLVED* -After upgrading from 8.4(3) to 8.4(7)23 it started working.  There must have been a bug with the version of code we were running. Hey folks! I'm trying to do direct authentication on a 5510 and running into some problems.  It works in anoth...

Hi,Please review my TACACS, it's working successfully with vrf.1) Please advise that groups are created are correct or these can be better configured. 2) I am getting message after 2 minutes of success aaa authentication "Line timeout expired". and t...