Network Access Control

We are using ACS to authenticate wireless users. wlans are set up for dot1x+cckm, and the controllers pass the user auths to ACS. ACS is integrated with windows AD for the pass/fail. Pretty standard setup, I believe. Nothing out of the ordinary.Now f...

Hi dears,i want vpn cleint authenticate from ISE server. In ISE server external identity source is Active directory. I configurate vpn client in ASA.I read and understand that i must configurate Inline Posture node in ISE.I confuse something. 1. Mus...

I want to binding username+call_station_id for one for one,call_station_id attributes is IMSI infomation.

                   Hi all,is there a way to push PVLAN configuration via ISE to Access switches.Currently I'm thinking about an authoration profile with an attribute setting PVLAN.Has anyone an idea how to push Private VLan configs dynamiclly to Acce...

Hi All,I have two issues:Is it still an issue when a wired user who is directed to the ISE CWA, is able to stay authenticated as a guest for as long as they stay connected? This is happening on our test pilot - a guest with 2 hour access on a wired c...

I have configured 802.1X authentication on selected ports of a Cisco Catalyst 2960S with Micorsoft NPS Radius authentication on a test LAN. I have tested the authentication with a windows XP laptop, a windows 7 laptop with 802.1X, eap-tls authenticat...

I'm trying to setup at iterative identity policy for EAP-TLS authentication.  Basically I'd like one rule to be tested then based on the result either proceed to authorization policy evaluation or go to the next identity policy rule.For example, I ha...

I currently have ISE version 1.1.1.268 installed in an ESXI 5.1 lab environment  so I can get used to how it works but when logging in, I get the error code 500 message. I have tried it in both Firefox 26.0 and IE 11 on a Windows 7 MachineThe specs o...

Hi I want to create a Network access authorization policy which bind authoriztion profiles for users in certain identifty groups,yet I dont have the condition "identity group" the only conditions i have are  "NDG:Location,           Time And Date" .n...

Setup WLC 5508 to Eval ACS 5.3 and set ACS external DB to AD.It's working fine with ASA VPN client ( VPN client to ASA then authenticate to ACS with AD)But when testing wireless authentication from WLC 5508 to ACS 5.3, it couldn't get thru and kept s...

Dear community,I trying to figure out how I can ensure the messages I get in the section Operations > Authentications goes to a syslog.I tried several severity and messages from Admin > Logging > Logging CategoriesBut I'm not able to get when someone...

I have two acs1121 appliances. Version : 5.2.0.26 Internal Build ID : B.3075 One is primary and one is secondary. The primary has a geo trust cert. It can authenticate to AD and allow Wireless access on my controllers. I would like to add the seconda...

Hello,I have a problem with authentication on ISE. We don't want a scenario whereby a credential can be used more than once to authenticate with ISE.For example.User A authenticate with ISE with usename : danimax.Username "danimax credential" should ...