Network Access Control

Hi Experts, I have wireless set-up with two SSID , one is used for corporate users with dot1x auth and other one for guest using CWA . I understood that , i do not need to buy any license or pay to cisco for Wireless license however i want to underst...

Hi all!Please help me/I'm use c181x-adventerprisek9-mz.151-4.M9.bin.I'm set AP with local radius server. In official documentation have "debug radius local-server", in ios command reference this command also exits.But in my router not have this comma...

we have dot1x configured on a site for authentication. upon failure of authentication the switchport is put into a guest vlan which is just a vlan going no where. we are seeing multiple failures for some reason causing several machines to get dumped ...

I have two different ISE enviroments both using Certificate based machine authentication. One environment uses the Windows Native supplicant the other uses Anyconnect NAM. Both environments get occasional errors upon authentication. For some reason t...

Hi All, I am migrating Cisco ACS 4.2 to 5.6 without migration tool. I am  manually configuring ACS 5.6 and I have done following steps. 1) Added Cisco ACS group2)Added Location3) Added devices4) Joined to AD5)Created a identity group6) Created intern...

Hi,I would like to know how the posture will work in a situation when we only want to have posture verification only for certain users (like department, location etc) connect via wireless.As we need to have posture on phase by phase but with a single...

I'm not able to install cisco acs on Windows 7He have a new versions of acs for win 7And which ones is. Tanks for your answers. 

hello all,I found a similar thread, but it didn't exactly answer my question:https://supportforums.cisco.com/discussion/12114056/flex-connect-user-acl-aps-locally-switchedShould I configure a regular ACL, or Airespace ACL on ISE, to support FlexConne...

following fromhttp://murison.wordpress.com/2010/11/11/cisco-radius-configuration-with-server-2008-r2/ network policy i set user group as Domain Computers when run 35501. can not use command "crypto key generate rsa"2. can not use command "ip ssh vers...

Hi all,I am setting up a CWA with Cisco ISE to authenticate Guests and Employees by Web and assign them to Two different vlans. The authentication pass. The authZ Profiles are affected. but The IP address did not change according to vlan until I rene...

I can't believe that this hasn't come up before, but I've searched for hours and literally found nothing.Like most org's we have an elaborate acs access policy, with many identity sources and tens of thousands of users.  The radius and tacacs authent...

Hello, I am looking for a solution for a hotel guest WLAN access management, the requrements are the following: - The application has to be as simple as possible.- It shall have a built in Radius server.- It shall have a built in web server with a pr...

Hi all, I have a question regarding time zone settings, AD interaction and ISE PSN. Assuming the following deployment: - ISE distributed deployment with 3 - Each PSN is joined to a AD at a specific site (example: one in USA, one in Europe, one in Asi...

From my Cisco 881 k9 router I run test aaa group radius server 10.20.1.10 username password legacy - -and I get user authentication request was rejected by server -- using windows 2008 as Radius server -- the IP address of Cisco Router is configured ...