Network Access Control

I have configured 802.1X authentication on selected ports of a Cisco Catalyst 2960S with Micorsoft NPS Radius authentication on a test LAN. I have tested the authentication with a windows XP laptop, a windows 7 laptop with 802.1X, eap-tls authenticat...

I'm trying to setup at iterative identity policy for EAP-TLS authentication.  Basically I'd like one rule to be tested then based on the result either proceed to authorization policy evaluation or go to the next identity policy rule.For example, I ha...

I currently have ISE version 1.1.1.268 installed in an ESXI 5.1 lab environment  so I can get used to how it works but when logging in, I get the error code 500 message. I have tried it in both Firefox 26.0 and IE 11 on a Windows 7 MachineThe specs o...

Hi I want to create a Network access authorization policy which bind authoriztion profiles for users in certain identifty groups,yet I dont have the condition "identity group" the only conditions i have are  "NDG:Location,           Time And Date" .n...

Setup WLC 5508 to Eval ACS 5.3 and set ACS external DB to AD.It's working fine with ASA VPN client ( VPN client to ASA then authenticate to ACS with AD)But when testing wireless authentication from WLC 5508 to ACS 5.3, it couldn't get thru and kept s...

Dear community,I trying to figure out how I can ensure the messages I get in the section Operations > Authentications goes to a syslog.I tried several severity and messages from Admin > Logging > Logging CategoriesBut I'm not able to get when someone...

I have two acs1121 appliances. Version : 5.2.0.26 Internal Build ID : B.3075 One is primary and one is secondary. The primary has a geo trust cert. It can authenticate to AD and allow Wireless access on my controllers. I would like to add the seconda...

Hello,I have a problem with authentication on ISE. We don't want a scenario whereby a credential can be used more than once to authenticate with ISE.For example.User A authenticate with ISE with usename : danimax.Username "danimax credential" should ...

HelloI'm having issues with logging on a Cisco ACS 5.5.0.46 cluster. Cluster has been upgraded from latest 5.3 ACS to 5.5.After upgrading to 5.5 logging was working fine. Monitoring and Reports had historical logs and was logging live/current authent...

HiHow to extend the license in the Cisco ISE?I would like to extend the  trial licences  because I still want to discover its features.

Hi,I have an 802.1x implementiation for about 100 users now.Clients must meet the following criteria: 1) PC joined to domain (machine auth.), 2) valid AD account (user auth.)Occasionally some clients are unable to join the network,even if the authent...

I recently enabled command authorization on my Nexus switches and RANCID could no longer run. The error rancid reported was:AAA_AUTHOR_STATUS_METHOD=16(0x10)It was weird because the commands RANCID was running, could be ran just fine manually by call...

Has anyone tried the export function in Cisco ACS 5.3 to export user list or the list of profiles in the Network Access Authorization ? I have looked thorught the user guide but I cannot seem to find any coverage on how to export the list of profiles...

ISE v1.2I use wired and wireless (WLC 7.2)Normaly when GUEST user connect he get IP in the default VLAN, he is redirected and he enter his login and passwordThen the VLAN guest is puched, his IP is renewed and he get new IP in GUEST vlanBut in my cas...