Network Access Control

Hey all,It would appear that from the amount of times this has been brought up, its still an issue!I have a Nexus 7k that needs TACACS auth to a Cisco ACS 5.4, but everytime i do it sticks all of us users into a default role of vdc-operatorI have cre...

i have question about ACS5.5 wildcard certificate.from this bug id CSCtr60378 it says that it was fixed on March 2014I thought it was fixed too for ACS 5.5.i have ACS 5.5 with patch 5.5.0.46.2 with date of 17 March 2014, but still encountered the sam...

Hi:We are planning a Guest Registration Solution using Cisco ISE 1.1 and Cisco WLC Flex 7500 with version 7.5What we need is:1. The guest user access to an wireless guest SSID, open browser, it will redirect to web-auth page.2. The guest user should ...

Need a sanity check on our proposed upgrade of our ACS. There is a preupgrade entitled  "Pointed-PreUpgrade-CSCum04132-5-4-0-46-0a.tar.gpg "which I'm not sure I need if I am running version 5.4.0.46.2.Here is the output from our CLI. Do I need the pa...

Hi,We are running Cisco ISE 1.2 with patch 6 and NAC Agent 4.9.0.1013.The Switch where the IP Phones  --> connected to PC is 4506E with latest Update, 03.05.02   15.2 E2.The NAC Agent pop up is Intermittent. The first time it does not pop up and gets...

Happy new week!Hope your day is going on fine.Is it possible to limit a internal (not guest) user credential for just a single active device session?I know this is possible for guest account on ISE 1.2, but not sure for internal user.If it is possibl...

Mobile users (WinXP, WIN7) use VPN-Client (5.0.07.0410 and some earlier for WinXP) to access our headquarter on CISCO ASA5520, V8.2(3). At different internet access points (German DSL like unitymedia) I see a successfully authentication (CISCO ACS 4....

Hi all,I've noticed, that ACS 5.1 is writing .gpg archives for backups. I'm about to upgrade an evaluation system and the Installation and Upgrade Guide tells me to do a full backup and restore in order to upgrade an eval to a production system.http:...

Currently we have ISE 1.2 configured using a multi-portal configuration.  We use a guest portal for both Guest Access and for devices we consider non-compliant employee.  Guest users are authenticated against an inernal user database in ISE, and the ...

How ise  can identify device? if i will use two apple device same model and forge MAC address, how ise can identify it uniquely beside MAC

I cannot login to my device portal with username and password in AD. It shows the massage "Username and Password is invalid" But i can login by internal user in ISE. I check the sequence in Authentication. AD is the first. PS. I use the username in...