Network Access Control

 Hello, we are using an older version of Cisco ACS version 4.2.  I am looking to see if we can enable certain groups to do only certain commands.  We are using the web interface for this.  All show commands are ok but we would also like to have them ...

Hello.I'm in process of migrating a clients' ACS from 4.2 to 5.4. With 4.2, they have it set up so that two standalone ACS servers (one in US, one in UK) will replicate database and configuration information. They are not configured as a primary/seco...

hi guys！can give me a configuration example for ftp auth-proxy.thanks!

Hello, I would like to understand that it would be the solution the most adapted in architecture ISE when the PSN server is on the central site and my remote site does not possess PSN and no equipments converge access.What takes place it if my link b...

Hello, Please I need help. I have to deploy VMware ESX ACS 5.2 at a customer, but I am training, but I could not make enough Lab, so I do not know where to start. The first phase is to investigate the customer's infrastructure, to provide a model. wh...

Hi All, One of my customer has recently bought an ACS Appliance which came with ACS version 5.3. He already has an appliance with version 5.2 running. We require now to move the ACS 5.2 configuration to ACS 5.3 Appliance, make it running and then upg...

Hi dears, I configurate EAP_FAST in Cisco ISE and want wired users authenticate from ISE. I install Network Access Manager Profile Editor and Cisco Anyconnect Security Mobility Client on PC. I configure Network Access Manager  when i want to save as ...

We are going to change IP address on 1121 (ACS 5.3) and 3415 (ACS 5.5) appliances.Do we need to renew the server certificates on them? These certificates are issued by an external CA and are used for EAP-TLS client authentication.

Hi all, I have been looking at the backup and restore procedure for ISE deployments and have to say I have found the documentation to be somewhat confusing in general. Whilst I get the gist of it I have found numerous areas that are grey. This questi...

GreetingsI am trying to provide limited access on Nexus 7k using ACS 5.4 via TACACS.  I used the following in my shell profile ATTRIBUTE:  cisco-av-pairREQUIREMENT:  mandatory (even tried optional)VALUE:  shell:roles="network-operator" Everything see...

I'm putting my ssh configuration on a cisco 3850 switch IOS is 03.03.02SE…………….but when  put in the following command? radius-server host server-1 auth-port 1645 acct-port 1646 key XXXXXXXXXXit get this notification:Switch(config)#radius-server host ...

Hi, I tried to use the command "import-data" to import devices and when I launched it I have an "internal error" without any more information.I did some debug command during the issue with no success.Do anyone already meet this issue? I did the same ...

Does anyone have a good walkthrough on how to setup ACS 5.3 to authenticate wireless users over radius? I currently have the SSID pointing to a Microsoft IAS server and would like to move the authentication to be done via ACS.Thanks,Chris         

Hi All In a distributed deployment where there is more than one PSN's how do we have a common url for guest redirection when doing a CWA (assuming no load balancer is used for the PSNs)? usually the redirection url would be 'https://<ise01.fqdn/guets...