Network Access Control

Hey Guys,I've set up a ACS 5.1 Server an want to use it with our LDAP System. Therefor, I'm trying to login to a Cisco 1841 by using my LDAP Account, but it dosent work. The ACS seems not to know that it should use LDAP, because I get:"22056 Subject ...

I've configure Ldap authentication on ASA 5545 to allow only a certain user group. I mapped the the memberOf group but this seems not to be working as it allows all AD users. ldap attribute-map LDAP-MAP  map-name  memberOf Group-Policy  map-value mem...

Hi all:     Here is  the scenario.My ISE is a vmare version,and works normal,now here comes an issue, my computer can't login the ISE web interface.The other computer can login the ISE web interface.     I think it maybe the cert's issue,cause when I...

Hi,the 3315 and other ise appliances have multiple nics.Is it possible/supported to use eth1 for hosting the guest portal? (wireless LWA)Tnx,Bart

Hi all!Customer is using Open LDAP as directory services.We're setting Cisco Wi-Fi network with following authentication scheme:Wireless LAN Controller - Cisco ACS 5.3 - Open LDAPAccording to the documents ACS - LDAP supports only EAP-TLS and PEAP-GT...

I have an ISE 3395 appliance that comes with ISE version 1.1.1.I've decided to upgrade it to version 1.1.2 patch 5 (latest patch version) and played with it for a few days.  I set it up as a stand-alone box.Now, I need to deploy this box as administr...

Team,We are building an ISE Demo for an event, I configured the Guest Access and it is working fine. the problem is that when the guests (Event attendess) try to access the internet they will be reditrected to teh ISE for Guest Authentication. The gu...

hi.i have many types of cisco devices such as:* catalyst's switches (2960, 3560, 2950,4500 chassis, etc... )* Nexus 5548.* Nexus 7000.* Nexus 4K.i have configure a tacas server and it works fine.but i have many problems:1. when i login with a tacacs ...

I am trying to setup an ISE deployment to allow me to connect to an SSID for client provisioing only. The provisioing should install a certificate from the CA server and setup the new SSID eap-tls authentication settings. I have two questions in rega...

I'm trying to gather info on distributed deployment w/ multiple PSN nodes.Having read through some documents, it looks like you can put multiple PSN's in a node group, and then place the node group behind a load balancer.Q1:Node group config requires...

Hey, I'm trying to make a setup on my Cisco 881 router, but I'm having some trouble.I've managed to configure logging in with a Public-Private key pair over SSH, but it's also still possible to log in over SSH with just a username and password. I'd l...