Network Access Control

HI Experts ,I have a cisco ACS 4.0 build 27  on windows 2003 server . My site was working fine when i was having a AD on 2003 server . Recently i have migrated my AD servers is 2008 .After the migration the ACS is not authenticating the users . Now i...

Hi everybodyI have 2 problems and appreciate any help resolving them as I am starting to pull my hair out and pretty soon there will none left.- I have a cisco unified network (ACS 5.1, Cisco controller, LWAP) and have configured ACS to integrate wit...

Hi,We activated dot1x authentication on a WS-C3560-24PS port (IOS 12.2(25) -several subversions) for the authentication of an IpTel. After the successful authentication we see in the ACS logs (and with a dot1x debug) that this client is reauthenticat...

HiI'm now in the tesing stages of our new Cisco ACS Appliance. I'm running version 5.2.0.26.6.I have created some authorization policies to either allow admin access or read only access. This is based on what AD group you are in and also a device fil...

hi thereWe just use ACS 5.2 to replace our old ACS 4.2, but the CPU load of new ACS server offen has high CPU load, we olnly has 12X AAA clients, does anyone has any idear about that?Version 5.2.0.26 Platform:VMware ESX3.5vCPU 2HD 520GRAM 4GB

I seem to be having issues trying to use the same Policy on an internal group and a group within AD. Under the Default Device Admin-Identity - Setup a Tacacs rule for a group within AD (rule 1) and duplicated the rule for an internal group (rule 2). ...

Hi,I'm sizing a NAC project with 600 loal users, but I can use 2 NAS3315 and split the users number in both equipments, handle 300 in the first NAS 3315 equipment and 300 in the second NAS 3315, it's possible?

Hi Community, Cisco Guys!I have a Catalyst 3560G PoE-48 here and wonder whyauthentification {fail, no response} options are being ignored.Port config:interface GigabitEthernet0/43 switchport mode access authentication event fail action authorize vlan...

Hi Experts,we have single ip address with /32 configured in AAA client list. After AAA configuration in switches , we are getting message as a “ Tacac server is not available please try login with local account “ . ACS logs : ---- A TACACS+ packet w...

HiI got a health alarm on my ACS 5.2 due to disk usage for /opt is 100%. This is a single server (primary) system.Suggestions on how to cure?Regards, Atle Inge

I have a admin who nested a Network device group inside another network device group. Is that reccomended? For instance, there is a NDG for Asia, and inside asia he put other NDG for Routers, another for switches, and yet another for firewalls. This ...