Network Access Control

Hope you guys can help explain why is it working this strange. Thank you.access-list NET1 permit ip host 10.1.2.27 10.76.5.0 255.255.255.224static (inside,outside) 192.168.100.100 access-list NET1ciscoasa(config)# show access-list access-list NET1 li...

Hi guys,Need a serious help.In one of the customer solution I am trying to integrate SecurEnvoy Radius server with ASA firewall, but not able to.SecurEnvoy server is listening on Port 1812 and working fine for other Radius clients except this ASA fir...

We are using ACS 5.1 and from time to time we are getting a warning saying that the active sessions are over the limit (250000).  It is just a warning, so my assumption is that its not a big deal, but how do we keep from getting the event, or prevent...

Hi,I am configuring aaa-server on ASA-5505(Radius) and i am Using microsoft IAS for authentication for SSH connections on ASA, so during " test aaa-server authentication " i getting this message ERROR: Authentication Server not responding: AAA decode...

I wanted to debug some USE vs. AD problems but noted that all debug files available under Opeations>Download logs>(mynode)>Debug logs are corrupt.While it seems that seom loggin is going on (e.g. the deployment.log is already accompanied by old versi...

Hi,May i ask if you would know what is the maximum user IDs that I can create to the ACS server? The client have an ACS appliance with version 5.2.Sorry, but i cannot find it in the datasheet. Thanks.

Hello,With TACACS+  we can have  (TACACS+ Administration) Logfile on ACS that shows users activity. but with radius there is no such logfile to show usres activity.    i want to know is anyother way how to check users activity while using radius-serv...

Hello experts,Is it possible for one to configure onboarding without having to register the device within the supplicant provisioning work flow? If so, how can it be accomplished?Any input is appreciated.Fadi Ashour

I am Ccna, and now study for Ccna Sec, how can I download ACS server and Tacacs for testing, I have real cisco lab

Hello,Is there any way to let the ISE check if the PC is connected to the domain or not? I have checked all the posibilities, the only workaround that I have found that I can force the dot1x authentication to use the same domain credentials when logi...

We have a Cisco 2960S configured for TrustSec (802.1x+MAB), with several workstations/users connected to it through their Cisco IP Phones. The users are using 802.1x and their phones are being MAB'd. Intermittently, the MAB functionality seems to st...

Hello -We're in the process of implementing an ISE 1.1 server for Guest Wireless Access / BYOD at our company and ran into an issue with authenticating from iPhones / iPads when the account is set with 'change password on next logon' (it's a local ac...