Network Access Control

Hello Everyone! Long time reader first time poster on the Cisco Support Forums. I have found myself in waters where I could use some help and use some direction on where to get started. (It may not be possible for all I know!)We have a Cisco 3660 rou...

What information is needed.....Identifier ID or PAK ID?

Hi all,I'm having an issue on my network where intermittently users are being denied access to the network because dot1x authorization is failing (at least that's what it looks like). I'm mainly seeing this on Windows wired clients, but I think that ...

I have a few 3560x switches, and some 4500s.  The 4500s are connecting to my ACS with RADIUS just fine and authenticating MAB with an internal indentity store.  I am using TACACS for command AAA and I am starting RADIUS for MAB.  When I configure the...

Hi,I have a single node ISE deployed and have been adding and deleting policies for the past two weeks without issue.  It's using our production AD and CA server and connected to NCS.  My problem is that today when I was working on a new MAB policy, ...

                   Hi, we have cascade ip phone environment, and we want to authenticate all the ip phones.when I say cascade ip phone, I mean ip phone behine ip phone behine ip phone.which host mode is the best ?in my test, when I use multi-domain, ...

Dear colleagues,could you please advise whether any known issues exist with the number of ACL entries limitations when applying on ISE Inline Posture Node for VPN-connections?We faced with the problem, when ACLs longer than 100 entries cannot be appl...

Can anyone point to a good, inexpensive RADIUS or TACACS server solution that runs on Windows?  Cisco ACS is a bit more money than is wanted to part with at the moment.Thanks in advance.  All replies rated.                  

I have a Task where I have to relocate ACS setup of Primary and Secondary ACS to a new DC, no configuration changes will be done, however, I have to do this with zero downtime.The plan is move the secondary server first to the new DC, promote the ser...

Hi,we have acs 5.3. i have created new user. when i try to login in router, the access is denied, but with the same user i am able to access nexus switch.so with newly created user, i can only access nexus switch but can access any other devices. all...

     I am going through a 2 year degree course for Network Design and Adminstration and I have an internship with the city I live in. I have been tasked to reconfigure over 150 layer 3 switches (all Cisco and ranging from 2960, 3560 to 3850 [the 3850...

The following message from ACS 5.4.0.46 is confusing me:"Configure Remote Repository under Purge Configuration which is used to take a backup of data before purge."cause it is configured:incremental backup is happenening successfully daily. and one f...

We are in the process of integrating ISE into our WLC and are planning on implementing HReap (Flexconnect) local switching.  We have setup the ISE server as a Radius entry in the WLC and added WLC to ISE, same shared secret.  We have a test SSID conf...