Network Access Control

Hello all,  I am in the process of migrating from ACS 4.3 to 5.4, in the previous version of ACS I had administrators that were assigned to groups in which they could manage.  I am looking for the same functionality in the new version but I have not ...

Hi,My question if it is possible on Cisco 1600 AP's  to  disable the server certificate validation on a dot1x peap authentication method (please provide if any the appropiate CLI)I now the in PEAP for a PEAP user implementation you want to validate t...

In My Cisco 2960 switch is not working with EAP-TLS mechanism of 802.1x but its works well with other  protocols like EAP-PEAP or MAC Address authentication.Below is the configurationaaa authentication login default group tacacs+ localaaa authenticat...

Hi,I am installing ACS 5.4 for WiFI user and using EAP-TLS/ certificate based authentication.I have Authorization profile created as shown in attachement.Under authorization profile i have selcted "Was Machine Authenticated=True"Condition.Somehow cli...

I have setup and SSID on my WLC. I got the redirecting to my ISE guestportal working.However when I sign in I get a Device regitration Page "This device has not been registered"Unable to obtain the user information needed for network access.The devic...

Hi there,As  subject explains all, I want to use ISE Guest Portal for my domain  users. I have tried many different ways to authenticate users and  finally I came to the conclusion that ISE CWA works pretty well and is  very stable. WLC Webauth sucks...

Does anyone know how to identify which SSID the user is attempting to authenticate with?  My use case is this:  I have an Inside network tied to SSID 1 and a Outside Guest network tied to SSID 2.  Both WLANs are using PEAP w/MSCHAP v2 and they are au...

I have an ssl certificate that shows in the cli of my ASA5505 but not in ASDM. The certificate is not used anymore and is not associated with a trustpoint. Does anyone know how I can completely remove it?

Hello Everyone! Long time reader first time poster on the Cisco Support Forums. I have found myself in waters where I could use some help and use some direction on where to get started. (It may not be possible for all I know!)We have a Cisco 3660 rou...

What information is needed.....Identifier ID or PAK ID?

Hi all,I'm having an issue on my network where intermittently users are being denied access to the network because dot1x authorization is failing (at least that's what it looks like). I'm mainly seeing this on Windows wired clients, but I think that ...