Network Access Control

Hi Forumers'I need to know how WLC can support ISE guest management in wireless mode. Tested and confirm by Cisco SE, Knowing that WLC currently does not support dynamic VLAN authorization for central web authentication. This limitation will be addre...

Hi,I have configured RADIUS authentication for VTY access to a Catalyst 2960S running 15.0(2)SE2.The RADIUS server is a Microsoft server running the Network Policy and Access Service role (Microsoft's own RADIUS server).Everything is ok apart from th...

GreetingsWe currently have Cisco ACS 4.2 running with verisign trusted SSL certificate running 1024bit.  This SSL certificate is used for PEAP and wireless users with WLC.  Since the new standard by Verisign is issuing 2048bit we can no longer renew ...

Hello everybody,The subject pretty much self explanatory. I have a fresh ACS 5.4.0.46.4 installation consist of 2 boxes in a distributed enviroment. Everything besides policy left to defaults.After, say a reebot to secondary box it takes very long ti...

Hi,I just have a basic question. When ISE is integrated with AD to authenticate Windows users, what exactly goes on between the ISE and AD. For example, if ISE sends a "Access-challenge" to the client PC, the PC will respond with the hash of the chal...

Hi,I'm involved in the rollout for ISE. While trying to connect to the Guest profile using the browser, it gets connected to the Guest profile, after authenticating the credentials. But after some time, the connection gets disconnected automatically ...

Cisco ISE Ver: 1.1.2.145Windows : Win 2003 ServerI am attempting to integrate ISE with AD, but ISE won't join AD and joining attempts fails, though I am able to add same domain as external LDAP identity store ?1.user used to join the domain has admin...

We are planning to use Cisco AnyConnect Network Access Manager as a 802.1x supplicant for our wired network as we ran into issues with  Microsoft native supplicant. There are certain advantages in using inbuilt supplicant on Windows as one can get de...

hi guys,     when i try to enable acs migration web interface,i got the error message as below,anybody would be help on it,thanks in advance!acs52/admin# acs config-web-interface migration enableFailed to modify webapp statepasted the logging as belo...

We are using Microsoft IAS Radius server for authentication to a large number of Cisco routers in our organization. Is it possible to log the commands that are entered on routers (Whether console or telnet session) for audit purposes? If so, is the...

Hello,I am running ACS 5.4.0.46.4.  I am creating command sets to restrict access for a certain group of users.  Is there any way to restrict them from accessing a specific interface (Gi1/1/1 for instance)?  I tried putting a "deny interface GigabitE...

Hi..We are deploying ISE 1.1.1 for an enterprise customer. Having some doubts about postering. Customer wants to check windows update as part of posture check. What I understood, ise supports only wsus. There is a predefined rule pr_WSUSRule,which ca...

Hi All,Its a Cisco Acs 1120 device having version 5.0.I have cerated three basic user group which having privillage leve 15,10 and 1 on ACS Tacacs+.My configuration for AAA on Switch is as followsaaa authentication login default group tacacs+ localaa...