Network Access Control

Cisco 2950, ACS 5.3ACS tested, I created a local account on the ACS and enabled authentication on the 2950. All working.Dot1x - not workingConfiguration on the switch:Switch#sh run | i dot1xaaa authentication dot1x default group tacacs+aaa authorizat...

I put a customer on 802.1x using 4510. The CPU went up and trying to troubleshoot why. I have a similar setup some place else and everyhting is normal. Any ideas??4510_SW# 4510_SW#sh verCisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IP...

Dear all,I'm using ACS 5.5 to authenticate dot1x users on my switches.I have enabled accouting reports on my switches. I can see the accounting reports abut the net usages of every user on the monitring secton.However, I was wondering if there is any...

I have configured ISE High Availability with two ISE virtual servers.While testing HA I powered off primary server, after powering off primary server secondary ISE becomes active but not able to authenticate any clients.ISE supposed to authenticate f...

Hi support community,I am experiencing an issue while trying to create some read-only users on my FWSM.I've setup the authentication on my RADIUS Server, which works fine, and put the aaa authorization command LOCAL  command.I've also set the command...

Hi All,First time posting, hope y'all can be gentle. Can I get a "for dummies" explanation of the RADIUS Attributes, maybe for the dictionary RADIUS-IETF first.For example, if i'm goinfg to make a Condition, and choose RADIUS-IETF as my dictionary, w...

Hello,We have some problems with our ISE 1.2 during onboarding BYOD's.Onboarding works fine for a lot of devices. But when onboarding a Windows 8.1 laptop we receive the following error:"Your device is not supported"We using the latest ISE 1.2 patche...

                   Hi, I'm using ISE and I want to redirect https traffics to one web-page.so I used cisco-av-pair = url-redirect=test123also, test123 is existed in WLC withdeny https anydeny any httpspermit ip any anyhowever, it does not redirect to...

Hi all I have couple of user in acs , all the cisco switches authentication is happening through acs( local users in acs) and enable password locally on the switch .Now for one user  i want to mange enable password through acs Is it possible Thank yo...

Hi Team,We have configured the ASA with ACS and local users for authentication. ACS users can login the firewall, but not able to SSH using local credential.Please let us know whether ASA will authenticate with both ACS and local. If yes, please shar...

Hi,We are trying to setup ASA to do cut-through authentication proxy, and use ISE as RADIUS. We can successfully authenticate the user from Radius on the ASA, while he opens a web-page, but then it displays the error: authorization denied.What we wan...