Network Access Control

following fromhttp://murison.wordpress.com/2010/11/11/cisco-radius-configuration-with-server-2008-r2/ network policy i set user group as Domain Computers when run 35501. can not use command "crypto key generate rsa"2. can not use command "ip ssh vers...

Hi all,I am setting up a CWA with Cisco ISE to authenticate Guests and Employees by Web and assign them to Two different vlans. The authentication pass. The authZ Profiles are affected. but The IP address did not change according to vlan until I rene...

I can't believe that this hasn't come up before, but I've searched for hours and literally found nothing.Like most org's we have an elaborate acs access policy, with many identity sources and tens of thousands of users.  The radius and tacacs authent...

Hello, I am looking for a solution for a hotel guest WLAN access management, the requrements are the following: - The application has to be as simple as possible.- It shall have a built in Radius server.- It shall have a built in web server with a pr...

Hi all, I have a question regarding time zone settings, AD interaction and ISE PSN. Assuming the following deployment: - ISE distributed deployment with 3 - Each PSN is joined to a AD at a specific site (example: one in USA, one in Europe, one in Asi...

From my Cisco 881 k9 router I run test aaa group radius server 10.20.1.10 username password legacy - -and I get user authentication request was rejected by server -- using windows 2008 as Radius server -- the IP address of Cisco Router is configured ...

HI  We have bought new ACS5.6 SNS3415 Boxes , earlier we have ACS4.2.1.15   , now we want to migrate the data from old ACS to new ACS. We have downloaded the ACS and trying to install 4.2.1.15 but getting the error" ACS4.2.115 can only be installed o...

12511 Unexpectedly received TLS alert message; treating as a rejection by the client how can i fix this?

Hi All,Thought I'd ask here before going to Cisco TAC.I am the junior admin where I work and have been tasked with configuring TACACS on our devices. We have 5 1841 routers.I added these commands to 3 of the routers but my AD creds didn't work.______...

Hi, all.I need to configure a router with some users (local or RADIUS). Some of them will access with no superuser level and others will gain superuser (enable) access. The question or doubt I have is the next: I'd like that when a superuser connects...

Hello all,Does Cisco ISE 1.2 support Catalyst SRW224G4P and Small business ESW520 Switches?Best regards.   

Dear guys,      I deployed Cisco ISE for Network Access Control. My topology as described as attached image. I configured Cisco ISE as Radius Server for Client Access Control. But, I got some problems such as:No Accounting Start. (I have configured a...

Hi All, We would like to achieve VPN authentication through acs 5.6 as below1) If user called user1 is part of AD-group1 then it should authenticate through AD2) If user called user2 is part of Local ACS group group2 then it should authenticate throu...

Hi Cisco Support Community,and again I'm struggling with my ISE understanding. It's kind of frustrating - daily more and more questions arise :)Here's the thing and I hope some of the ISE experts here know the answer: I want to authenticate my wired ...

Hi, I would like to create custom attributes on an endpoint object - just as it is possible to do on user object.How do I do that ?Can I use the REST API for that - or is that not supported ? Best regardsTue