Network Access Control

ACS vs ISE

Hi experts,I'm looking into a network access control solution, and I have the following questions:1- My understanding is that ACS assigns unauthorized assets to a guest vlan/zone, but what happens next if access to resources (such as internet) requir...

Nexus 7009 using radius authentication

I have setup my radius server access on the Nexus but am unable to authenticate through putty. If I do a radius-server test on the Nexus it says I authenticate. Here is the log I am getting. I would appreciate any help.2012 Mar 14 16:03:21 switch-a %...

ACS 5.x Question - With Entrust

We setup certain users to use a particular password authentication, i.e. local or Entrust. This is used for local ACS accounts to log into switches with their Entrust/VPN credentials instead of using a local user DB. Is there a way to set this?

Secondary ACS accessibility

Hi all,I have an identical ACS 5.1 pair connected in active/backup mode. Is it by design that only the primary ACS IP address should be "pingable" from remote subnets but the secondary ACS only from the local subnet, or is there a configuration setti...

cached token rejected/expired

Once I used a router (3660)for dail-in with ACS and RSA,then I am going to take the 2611 over 3660,and the configure are basicly the same. But I can not dail-in with token,and on the ACS I found this message:cached token rejected/expired.However if ...

no access to enable mode

Hi , I have a little issue with the tacacs config i'm using on a 800 routerCisco IOS Software, C880 Software (C880VOICE-UNIVERSALK9-M), Version 15.1(1)T3, RELEASE SOFTWARE (fc1)this is my config : enable secret 5 $1$MIIf$bu0Fy/LyqPkMWiq4oEtGk0!aaa n...

ACS 5.3 Certificate revocation list

Hello frineds,Could anyon hep me in getting Certificate revocation list configuration in ACS.I have 3 CA certificates attached in ACS. 1 is root & 2 other are intermediate certificate.Now I should configure revocation URL's & configuration in which C...

AAA Authentication via console and ssh

I've been trying to find the right information on Cisco's site, and I'm not having success.We have a 3900 router that we would like to do authentication via a local userdatabase. We want ssh access and console access using a local user on the router...

Resolved! Configuring authentication using AD Group mappings

Hi,I recently installed ACS 5.3 and am trying to configure as follows:1) Devices are seperated into Locations and Device types.2) ACS is authenticating using AD.3) User must be in specific AD group to be able to access a specific device type/location...

mac-notification traps not sent

Our 6509 switch is not sending mac-notification traps to the NAC manager.The linkup linkdown traps are working however the traps specific to mac-notification are not.SNMP counters are not incrementing and a show mac address-table notification change ...

3750G and 802.1x

HiI have a c3750-advipservicesk9-mz.122-46.SE.bin which I think I can use 802.1X and want to restrict1. only company PCs on this switch2. Polycom Video units like 9000HDX3. Cisco IP Phones PCCan I do this with 802.1x or is there something else. Sampl...

Cisco ACS User Logout Reporting issue

Dear All,Actually i have configured my Cisco ACS and integarated with Fortigate Firewall on RADIUS for authentication of VPN users. its working fine and user authentication is working but the problem is that i want too know when user logged in and lo...

ISE - Question about the NMAP service

Hi there,I am currently playing around with the updated ISE 1.1 and tried out the new NMAP probe feature.Is there any possibility to alter or expand the features of the NMAP implementation in the ISE, like additional scripts etc.My main concern is to...

MAC OS-X and authentication via ACS 5.2

My customer has a large installed base of MACs, all connected via controller-based (5508) WLAN. He wants to grant access to the network based on the device's mac addresses and move the WLAN-clients to a specific VLAN.I added all devices with their ma...

Wireless OOB NACissue : OOB Error: connected device <client_MAC> not found.

Dear all,I've deployed wireless OOB NAC. Some user can login normally, but some other user can not login. The error message is OOB Error: connected device <client_MAC> not found. This only happen at some PC user.Does anybody have any idea?Thanks

Network Access Control

Forum Posts

ACS vs ISE

Nexus 7009 using radius authentication

ACS 5.x Question - With Entrust

Secondary ACS accessibility

cached token rejected/expired

no access to enable mode

ACS 5.3 Certificate revocation list

AAA Authentication via console and ssh

Resolved! Configuring authentication using AD Group mappings

mac-notification traps not sent

3750G and 802.1x

Cisco ACS User Logout Reporting issue

ISE - Question about the NMAP service

MAC OS-X and authentication via ACS 5.2

Wireless OOB NACissue : OOB Error: connected device <client_MAC> not found.

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Congratulations to the July 2022 Spotlight Award winners!

PxGrid - Learn MAB Authentication Username

Endpoint abandoned EAP session and started new

Tenable ISE Integration

Can AnyConnect ISE posture popup action be changed?

ISE 3.0 Agentless Posture issue

ISE WLC - Assign interface to client

Kerberos SSO for ISE Sponsor Portal

Cisco ISE API's for CoA

CISCO ISE NAD API export for scheduled nackup

ISE Guest portal redirect