Network Access Control

Avaya Phone in same VLAN as workstation

Ok so here is my dilema, Avaya Phone with Docking station plugged in to it, dot1q passes the workstation fine, but hangs the phone. With out creating a voice vlan is there any way I can have the phone authenticat with mab, and the workstation with do...

Some ACS5.3 issues

Hi AllTrying to work out how to get these access policies on ACS 5.3 to work one after the other and other issues with access policies.1, If i go to Access policies/Access services/Service selection rulesThen the rules seem to be hit from the top dow...

Local authentication and TACACS on ASA and Routers

If you have TACACS or Radius by default to telnet to a router or SSH to an ASA is there a way to put a local username and use both TACACS and local at the same time? I have only been able to use local authentication as a way of failover when Radius...

ACS 5.1 and Administrator Privileges

Hello,until now we have an ACS 4.1 System up and running and we have several administrator accounts which can only edit users for one specified group. Now we would like to upgrade to 5.1 and I could not find the possibility to give an administrative ...

Resolved! EAP-TLS authentication with ACS 5.2

Hi all,I have question on EAP-TLS with ACS 5.2.If I would like to implement the EAP-TLS with Microsoft CA, how will the machine and user authentication take place?Understand that the cert are required on both client and server end, but is this certif...

Configuring ASA w/8.2(1) to work with ACS 3.3- enable issues.

Hello all-Having an issue with the ASA devices. Here is the relevant part of the configuration:<aaa commands>aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (outside) host <host ip>key <key>aaa-server TACACS+ (outside) host <host2 ip>key <key>a...

Upgradition ACS 4.2.0.124.16 on appliance 1113 to ACS 4.2.1.15 and then to patch 8(Latest)

Dear Everyone,we have below softwares in the order to install one by one on the appliance 1113.1)ACSse-Upgrade-Pkg-appl-mng-v4.2.1.15-K9.zip(Appliance Management package)2)ACSse-Upgrade-Pkg-acs-v4.2.1.15-K9.zip(ACS Software package)3)applAcs_4.2.1.1...

Resolved! ACS 5.3 and wide chenges on network devices

Hi, I need to identify a method to modify a large number of network devices in ACS 5.3, with name, type and location update.Is export/import the best solution ?thanksrenato

Clean Access Agent Remediation for ESET Anti Virus

Hello,Hope someone can help, we have a NAC 4.8 deployment using Clean Access Agent 4.8.0.35 and are trying to use it with ESET. We are havingdifficulties when we try to remediate to collect the latest anti virus definitions, when clicking on the upd...

WLC DHCP Client Profiling Option 55

Hi,I'm testing the new WLC DHCP Client Profiling feature under version 7.2.110.I can see the cisco-avpairs related to dhcp-option, but only option 60 and option 12 are available. I would like to have option 55, as it is excelent for fingerprinting a ...

Resolved! ACS 5.3 Deleting Migrated_NDGs group

Hi,I have been given the task of sorting out an ACS 5.3 server, the devices were all imported from an older 4.x ACS server. All the devices where placed in the 'Migrated_NDGs' group which was created by the migration tool.Since I have no need for thi...

Resolved! ACS 1121 with v5.0 PAK lost

It has been more than a year since a customer bought a Cisco ACS 1121. It was unpacked then and the PAK is lost, no where to be found.Is there any way to retrive the lost PAK ??? Help needed much.

ACS Locked Database

Folks - our Windows server disk filled up. Cisco ACS 4.2 threw a fatal error and locked the database. I've cleared up space on disk and reloaded server. ACS processes start, but sockets do not. It appears that database is still locked, and CSMON i...

Cyclades ACS8 with Cisco ACS using TACACS+

Hi All,I'm hoping someone has already gone through this and has a nice answer for me. I'm looking to integrate our Cyclades ACS Console Servers into our Cisco ACS servers using TACACS+. At this point it's sort of working but not quite the way I wan...

ASA 5505 Cut through proxy and redirection after login

I have successfully set up a 5505 as a cut-through proxy so that wireless users are required to log in when they open a browser to access the Internet. Is there a way to take them to the original page they requested after the login is complete, rat...

Network Access Control

Forum Posts

Avaya Phone in same VLAN as workstation

Some ACS5.3 issues

Local authentication and TACACS on ASA and Routers

ACS 5.1 and Administrator Privileges

Resolved! EAP-TLS authentication with ACS 5.2

Configuring ASA w/8.2(1) to work with ACS 3.3- enable issues.

Upgradition ACS 4.2.0.124.16 on appliance 1113 to ACS 4.2.1.15 and then to patch 8(Latest)

Resolved! ACS 5.3 and wide chenges on network devices

Clean Access Agent Remediation for ESET Anti Virus

WLC DHCP Client Profiling Option 55

Resolved! ACS 5.3 Deleting Migrated_NDGs group

Resolved! ACS 1121 with v5.0 PAK lost

ACS Locked Database

Cyclades ACS8 with Cisco ACS using TACACS+

ASA 5505 Cut through proxy and redirection after login

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Rest API - Update user - ERSException - Operation is not permitted

Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Cisco ISE Guest Portal Login using Azure - Open Multiple Tabs

Profiling Policy based on MACOUI Name or MAC Address Hex Prefix ?

Can AnyConnect ISE posture popup action be changed?

C9200 - MAB set up and not able to ping or access to a shared folder

Edit Trusted Certificate ISE 3.1.0.518 P3 of my Private CA

Cisco ISE with AADJ device and user first login

Annoying TAC: Load-balanced picking not yet implemented messages

Autosmart port and IOS Shell scripting