Network Access Control

I have 6 inter-connected ACS appliances used for RADIUS authentication of wireless users. Currently they are running v5.4 and need to upgrade to v5.5. It would be difficult to upgrade them at the same time since they are in different regions in the w...

Hi, You can move the CA certificates from my server windows  server 2003 to  a Cisco router?I currently have a Windows 2003 server CA (SCEP)  and need to move certificates from this machine to a cisco 2900 router (ISR) ... Is it possible?

Hello,I would like to integrate RSA SecurID to our current setup as a second factor authentication. I can authenticate with AD and RSA individually but not on the same authentication sequence.The scenario include the Anyconnect VPN where the user is ...

How to install an external wildcard certificate for SSL on ISE 1.3 and get it running for a guest portal ? Follow this links for guidance: Cisco Identity Services Engine Admin Guide, Release 1.3http://www.networkworld.com/article/2225032/infrastructu...

Does anyone know of any documentation that will assist in expanding my ISE policies to support connectivity through FlexConnect APs from a remote location? I guess a better question is will this configuration even work? We have a working ISE cluster ...

Dear Expert, Let me to introduce my self, I’m johannes that working in SI. Right now we have existing ACS type 1121 with software version 5.2. I want to adding one new ACS in my network and my plan is both of ACS can syncronize each others. So we pur...

Hello, my client has the following production environment: ACS v4.0 and AD on a Windows 2008 R2 (working well). He wants to migrate AD to Windows 2012 and want to know if there will be compatibility issues with the ACS, if so, what should they do to ...

Hi Experts, I have wireless set-up with two SSID , one is used for corporate users with dot1x auth and other one for guest using CWA . I understood that , i do not need to buy any license or pay to cisco for Wireless license however i want to underst...

Hi all!Please help me/I'm use c181x-adventerprisek9-mz.151-4.M9.bin.I'm set AP with local radius server. In official documentation have "debug radius local-server", in ios command reference this command also exits.But in my router not have this comma...

we have dot1x configured on a site for authentication. upon failure of authentication the switchport is put into a guest vlan which is just a vlan going no where. we are seeing multiple failures for some reason causing several machines to get dumped ...

I have two different ISE enviroments both using Certificate based machine authentication. One environment uses the Windows Native supplicant the other uses Anyconnect NAM. Both environments get occasional errors upon authentication. For some reason t...

Hi All, I am migrating Cisco ACS 4.2 to 5.6 without migration tool. I am  manually configuring ACS 5.6 and I have done following steps. 1) Added Cisco ACS group2)Added Location3) Added devices4) Joined to AD5)Created a identity group6) Created intern...

Hi,I would like to know how the posture will work in a situation when we only want to have posture verification only for certain users (like department, location etc) connect via wireless.As we need to have posture on phase by phase but with a single...