Network Access Control

Does anyone know how to identify which SSID the user is attempting to authenticate with?  My use case is this:  I have an Inside network tied to SSID 1 and a Outside Guest network tied to SSID 2.  Both WLANs are using PEAP w/MSCHAP v2 and they are au...

I have an ssl certificate that shows in the cli of my ASA5505 but not in ASDM. The certificate is not used anymore and is not associated with a trustpoint. Does anyone know how I can completely remove it?

Hello Everyone! Long time reader first time poster on the Cisco Support Forums. I have found myself in waters where I could use some help and use some direction on where to get started. (It may not be possible for all I know!)We have a Cisco 3660 rou...

What information is needed.....Identifier ID or PAK ID?

Hi all,I'm having an issue on my network where intermittently users are being denied access to the network because dot1x authorization is failing (at least that's what it looks like). I'm mainly seeing this on Windows wired clients, but I think that ...

I have a few 3560x switches, and some 4500s.  The 4500s are connecting to my ACS with RADIUS just fine and authenticating MAB with an internal indentity store.  I am using TACACS for command AAA and I am starting RADIUS for MAB.  When I configure the...

Hi,I have a single node ISE deployed and have been adding and deleting policies for the past two weeks without issue.  It's using our production AD and CA server and connected to NCS.  My problem is that today when I was working on a new MAB policy, ...

                   Hi, we have cascade ip phone environment, and we want to authenticate all the ip phones.when I say cascade ip phone, I mean ip phone behine ip phone behine ip phone.which host mode is the best ?in my test, when I use multi-domain, ...

Dear colleagues,could you please advise whether any known issues exist with the number of ACL entries limitations when applying on ISE Inline Posture Node for VPN-connections?We faced with the problem, when ACLs longer than 100 entries cannot be appl...

Can anyone point to a good, inexpensive RADIUS or TACACS server solution that runs on Windows?  Cisco ACS is a bit more money than is wanted to part with at the moment.Thanks in advance.  All replies rated.                  

I have a Task where I have to relocate ACS setup of Primary and Secondary ACS to a new DC, no configuration changes will be done, however, I have to do this with zero downtime.The plan is move the secondary server first to the new DC, promote the ser...

Hi,we have acs 5.3. i have created new user. when i try to login in router, the access is denied, but with the same user i am able to access nexus switch.so with newly created user, i can only access nexus switch but can access any other devices. all...