Network Access Control

Hi all. I have always had challenges trying to 'prove' the importance of 802.1x and some of the advanced functionality provided by Cisco ISE. The OG150 (www.og150.com) is an automated penetration testing drop box. Once plugged into the network, it wi...

                   Hello Community,iam on the evaluation on Cisco ACS 5.5, and iam trying some scenarios for my company.I have to authenticate a ip phone . here i need one VLan tagged and one vlan untagged.In the authorization profile u can add the R...

Hi,Did anyone encountered this before when trying to join the secondary instance to the primary?The same version both the box is running.Please help.

recently we have deployed downloadable acl feature on acs for asa vpn users and noticed that this solution have at least two serious disadvantages: 1. there is only possibilty to give split tunnel networks to asa by acl list name radius attributes an...

Hello all,by my fault, I've set invalid management certificate. So, the GUI became unaccessible right after reboot of the mgmt service.Mozila Firefox is reporting "Certificate type not approved for application (Error code: sec_error_inadequate_cert_t...

Hi guys, hope this is something you can help with…2 x ISE 1.2 (patch 5) 3415 appliances with hostnames webproxy1.customerdomain.com and webproxy2.customerdomain.comAD integration with customerdomain.localGuest authentication (CWA) using a separate in...

Hi,We are trying to authenticate a Check Point Firewall(GAIA R76) to a 5.2 ACS using TACACS+We are able to authenticate the user OK but when we do a  'tacacs_enable TACP-15' to get elevated privileges the session hangs and gives 'internal error' mess...

All,We've set a custom loging prompt under System Administration > Configuration > Global System Options > TACACS+ Settings On our IOS switches/routers, we are getting our custom login prompt sent, but the NXOS devices are not receiving this same pro...

I am trying to change the port number on the ACS running 5.2 and could not change it from the default of 49. Is there any way I can change the default TACAS port number? I tried in the system admin configuration, I can change all other values but not...

Hi,I am unable to use the GUI on our ACS 5.3.40 VM. I have already tried the reset-management-interface command twice and stopped and started the application and performed a reload. I've also cleared my Internet Explorer browser cookies / data etc. T...

AAA failed nexus7010and local username error# sh runError: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

Ladies/Gents,I am facing issues when enabling tacacs authentication on my cisco switch, aaa login/password is working, aaa enable is not. Underneath details of my devices.Cisco ACS 1121: version 5.1Cisco Switch 3560: ios ver 15I also attached here so...

How exactly does the ACS deteremine which users are authenticated for access to a device?When our devices talk to the ACS - it checks the LDAP for pass/fail.  However, how do we prevent users who are in LDAP, but shouldn't have access to the device t...

I recently did an application upgrade to ACS_5.3.0.40. I was trying to install the next patch  5-3-0-40-9. i go through these stepsA. Logon to ACS server as adminB. Insert DVD that has 5-3-0-40.9.tar.gpg into onboard cdromC.at console prompt, type co...