Network Access Control

Dear all, Let's say you make two users "bob" and "peter".Bob has an privilege level of 15 and peter of 1.So I do:username bob privilege 15 secret 0 bob-and-username peter privilege 1 secret 0 peter Now when I hit "show run" I see:username bob secret ...

Hi, Very often, when we integrate ISE with customer AD and try to join ISE into domains, customer will ask what kind of service account they'll create for us to use to join the domain.  Based on Cisco documentation, the service account should allow I...

(X-posting as I mistakenly posted in the wrong forum)We are in the middle of an 802.1x deployment with Cisco ISE as the backend. We have been using Anyconnect NAM as supplicant.Everything is working famously on physical hosts, but we apparently have ...

Hi Guys,We have the following problem. Our customer has the following equipmentDell Latiude E7440 and Targus Docking stations (ACP70EU). On every workplace is a dockingstation, now the Dell machine connects to the dockingstation and a new network ada...

Hello,We are currently using 8 character Tacacs Server Key to authenticate devices in the Network.Our Plan is to migrate 8 char to 12 char. But I am not sure the Hardware/Software limitation of various devices in the Network to support this migration...

Hi,Just a question on ISE license consumption.If a user logs in and gets authenticated (user authentication) via ISE on a device that is already authenticated (device authentication), does it consume 2 licenses, one for the device and one for the use...

Good Day, Currently running a wireless NAC deployment on a single SSID with ISE 1.2.1. The BYOD enrollment works perfectly for most supported devices with the exclusion of the S3 on Android 4.3. I have tested Android 4.3 4.4 and 5 on other devices an...

Hello ,         after upgrading ISE 1.2 to 1.2.1 , I can't see posture status (pending) although it is working properly. I tried to install patch 1 but the same result.before upgrading , posture status was Pending when posture status still not reach ...

Hi Guys,ACS 5.5 is installed on SNS-3415 appliance.Integration with Active Directory 2012 has been successfully completed.The problem which I'm facing that i can't see all the groups of AD under ACS, i see only few of them.Also if i created new Group...

Hi Guys i have the following issue with BYOD registration. Latest Java version installed on a Macbook (IOS 10.9.5) then logged on to the client wirelless BYOD Network.  Then I get a redirect to the ISE server to register my device after that  the CIS...

Hi guys,I am doing it in a lab so please guide me to understand this concept.I have Cisco 3560 switch. What i want to achieve isAny device that connects to port 1 of switch, switch should be able to communicate with 802.1x server, tell it the mac add...

We are running Cisco ACS 5.4 for WLAN authentication.  Can we install multiple ACS server certificates and use them for EAP authentication?E.g.Cert#1 issued by CA#1, and will be used for PEAP authenticationCert#2 issued by CA#2, and will be used for ...

Hello, I create a Open SSID in WLC named Visitante and Configured ISE to do CWA.Rule is:AuthZ_CWA =  If Device:Wireless Lan Controller Equal WLC then WLC_CWA  I create a guest account in Sponsor Portal and above rule in ISE is: AuthZ_Guest = If Guest...

Hi all,We have a campus wifi network using two Cisco 5508s (in an HA configuration) on 7.6 code and 2700-series APs.  For our corporate users we have an existing SSID doing 802.1x with vlan assignment to Microsoft NPS running on Windows 2012R2.  All ...