Network Access Control

We are running Cisco ACS 5.4 for WLAN authentication.  Can we install multiple ACS server certificates and use them for EAP authentication?E.g.Cert#1 issued by CA#1, and will be used for PEAP authenticationCert#2 issued by CA#2, and will be used for ...

Hello, I create a Open SSID in WLC named Visitante and Configured ISE to do CWA.Rule is:AuthZ_CWA =  If Device:Wireless Lan Controller Equal WLC then WLC_CWA  I create a guest account in Sponsor Portal and above rule in ISE is: AuthZ_Guest = If Guest...

Hi all,We have a campus wifi network using two Cisco 5508s (in an HA configuration) on 7.6 code and 2700-series APs.  For our corporate users we have an existing SSID doing 802.1x with vlan assignment to Microsoft NPS running on Windows 2012R2.  All ...

Hi Pros,               I am a newbie in the ACS 4.2 and EAP-TLS implementation, with that being said. I face an issue during a EAP-TLS implementation. My search shows that this kind of error message is already certificate issue;However, I have delete...

Hi AllI did upgrades from 1.2.1.198 to 1.3. With one box (SNS-3495-K9) out of four I have a problem.I've tried it many times, I even made it to a standalone and did an application reset-config ise to initialize the box prior updating, but it always f...

Hey everyone, I was wondering if someone could help me. I am trying to implement 801.x port security in my network. In our switch ports we have an IP AVAYA phone connected and a workstation connected to the IP phone. I enable dot1x authentication on ...

I would like to inquire cisco ASA do support 2FA( second factor authentication-example: One time password) or not?. Just to inform, I want configure my cisco ASA to authenticate vpn user using Active directory password and One time password as well. ...

Hello,I was wondering if most of you enable the ISE 1.2.x feature "Suppress Repeated Successful Authentications." (Administration/Settings/Protocols/Radius). At first blush this seems like a good thing as it cuts down the number of entries in the log...

Hi AllHas anyone successfully used a Guest Role in an ISE authorization policy?I'm using 2 different Guest Roles that get assigned by the Sponsor on the account creation page.I want to differentiate between the 2 roles in my authorization policies to...

Hello everybody.I am having some trouble when lots of users try to connect via Anyconnect on my ASA (5545-X).At the peak some users complaints they cannot authenticate and I see these messages flaping on logs:%ASA-2-113022: AAA Marking RADIUS server ...

Can someone weigh in on the thought of having an ISE environment of physical appliances attached to Fabric Interconnects? I am curious of the ability and pros of doing this. Has anyone done this? Are there other benefits than just CIMC via UCS? Was t...