Network Access Control

Resolved! ACS enterprise architecture

Is it possible to use a combination of full version ACS appliances configured as primary at a HQ site, with remote branch offices configured as secondary servers that are running on ACS express appliances?? OR are there limitations on the ACS expres...

AAA authentication problem

Hi,I have configured the cisco 2960 switch with AAA & the radius server is free radius. I am able to login into the switch when radius server is working.But when radius server is not reachable, in that particular condition the switch doesn't move to ...

Tac_Plus (open source TACACS+ server) and NAM (Network Analysis Module)

I am trying to setup our cisco NAM's to authenticate against our open source tac_plus server. I see traffic on port 49 between the NAM and server but I keep on getting an invalid username/password error. I do not see any invalid logon attemps in ou...

logg ACS 5.2 is full

Hi,friend i have a problem with my ACS 5.2, same time the logg its full, i dont konw how to increase the size.I attached the screen.Could you help me

ACS Upgrade in live network ok?

I am about to upgrade our CiscoSecure ACS from 4.1 to 4.2. If I do so on a live network, can that affect anything within my network?I would hate to bring down an entire network and upset about 3000 users.Thanks in advance!

Telnet sessions default to user exec mode.

I am doing an eval of 5.2, we currently have 4.2 running in our network.I followed the user guide to set up a shell profile for priviledged exec mode. Set both the default and miximum priviledge to static 15. When I login to a network device, get t...

Radius setup on C3550 issues....RADIUS: unrecognized Vendor code 311

Here is my config:aaa new-modelaaa group server radius RADIUS_AUTH server xx.xx.3.11 auth-port 1645 acct-port 1646!aaa authentication login networkaccess group RADIUS_AUTH localaaa authorization exec default group RADIUS_AUTH if-authenticatedaaa acco...

ASA LDAP Authentication for SSL VPN

Hello everyone,I am having a problem getting an ASA running 8.3 to authenticate an SSL VPN directly against an LDAP on Windows Server 2003. I have changed the read access on the Active Directory to allow Annonymous to read it. I think I am missing ...

Resolved! ACS 5.2 commands Authorization

Greetings!Have a conceptual question bout CLI command authorization. We have ASC 5.2 up and running, providing AAA services for network devices. Now I need to make profiles for users in certain group to restrict dem CLI "rights" to show, clear count...

Pack and unpack Radius VSA attributes

HiAs far as I know there are some methods to pack radius VSA attributes. Here are:As the part of Cisco-AVPair26 - VSALength9 - Vendor ID1 - Vendor Type (Cisco-AVPair Attribute ID)Attribute Name=ValueIn the Vendor Specific attribute ("throught attri...

ACS 5.1 - Exclude reporting for specific username?

I'd like to know if there is a way to exclude passed authentications for a specific username from reporting in the Authentications-TACACS and Authentications-RADIUS reports?We have a few usernames that are used in scheduled jobs. We only need to kno...

ACS 5.2 Import Internal Hosts

Tyring to use the "File Operations" option to import hosts into ACS. I go through the wizard and click "Finish", the pop up goes blank and just hangs there. No errors are genereated. Anyone ever come accros this?

Resolved! Radius Auth for Login and VPN... conflicts

Hi,Im trying to configure a 7204 for radius login authentication, although the router is also configured with radius for VPN access. How can I configure it for both using 2 different raidus servers? the login via radius is working fine on another rou...

Cisco ACS 1121 integration with AD

Has anyone successfully integrated the Cisco ACS 1121 with 5.1 and AD and been able to use multiple policies to permit or deny access to different NDG? I am able to authenticate agains AD but I am having an issue with getting the policies to use the...

Configuring LDAP authentication in multi-domain environment

Hi, I am trying to authenticate Remote VPN users via LDAP and integrate this with "Dial-in" Permission attribute of user account. It works fine for a single domain with the following conifguration.aaa-server ldap-server (Inside) host 10.10.10.1 ldap-...

Network Access Control

Forum Posts

Resolved! ACS enterprise architecture

AAA authentication problem

Tac_Plus (open source TACACS+ server) and NAM (Network Analysis Module)

logg ACS 5.2 is full

ACS Upgrade in live network ok?

Telnet sessions default to user exec mode.

Radius setup on C3550 issues....RADIUS: unrecognized Vendor code 311

ASA LDAP Authentication for SSL VPN

Resolved! ACS 5.2 commands Authorization

Pack and unpack Radius VSA attributes

ACS 5.1 - Exclude reporting for specific username?

ACS 5.2 Import Internal Hosts

Resolved! Radius Auth for Login and VPN... conflicts

Cisco ACS 1121 integration with AD

Configuring LDAP authentication in multi-domain environment

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

ISE automatic posture remediation of anti-malware

Rest API - Update user - ERSException - Operation is not permitted

Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Cisco ISE Guest Portal Login using Azure - Open Multiple Tabs

Profiling Policy based on MACOUI Name or MAC Address Hex Prefix ?

When will Cisco stop supporting ISE version 3.0?

C9200 - MAB set up and not able to ping or access to a shared folder

Edit Trusted Certificate ISE 3.1.0.518 P3 of my Private CA

Cisco ISE with AADJ device and user first login

Annoying TAC: Load-balanced picking not yet implemented messages

Network Access Control

Resolved! **ACS enterprise architecture**

Resolved! ACS 5.2 commands Authorization

Resolved! Radius Auth for Login and VPN... conflicts

Resolved! ACS enterprise architecture