Network Access Control

Hello,I have following scenario: Computers are connected behind phones, and phones are authenticating with MAB. The problem is with phones, because they have two mac addresses one is in voice vlan and another is in data vlan. Both phone and computer ...

Does anyone know if a Security Group Tag (SGT) can be passed between layer 3 domains?Thanks in advanceAllen

          Hello, I've inherited a design for our Wired Guest Network (Security's policy prohibits any type of wireless in our facilities) to use the Cisco WebAuth solution, not as a fall back to 802.1x, but as a Guest Access solution in it's own righ...

Hello thereI have an ISE 1.1.1 setup, with a guest portal. The AD can be used to log onto this portal, and the Guest Portal Policy Configuration is on First Login.However, every time a AD user logs in on the portal, he has to accept the User Accept P...

Hi GuysI suffering a strange issue , I have two group users (wireless user , VPN users),I created a NAR To restrict users,, created two group NAR (network access restriction ) wirless group and vpn groupI attached wireless NAR group to wireless group...

Hi experts After upgrade  to ACS 5.2 appliance ,  we are trying to configure AAA between Ciscoworks  and ACS. Authentication is working but authorization fails , logged user cannot access to admin parameters. I've configured attributes manually but i...

                   Hello,Is it possible to upgrade the CSACS-1121-UP-K9 to be a non upgrade part?We were going to upgrade from a Windows 4.x to the above Appliance (version 5.x) but there is now a reason to keep the old Windows version running theref...

Hello Everybody, I have a problem when I try to install ACS 4.2 on Server 2003 R2.When I start the ACS setup, i recive an error message saying:  I searched a bit on the internet but didn't find any helpfull solution. Anybody has any idea how to fix t...

As far as I know anb based on some esperience in a test environment it seems that cisco ISE among two load balancing radius kind of attributes supports only vlan gropu assignment, this means that on the switches vlan group assignment is required. A s...

GreetingsHere is the scenariopreviously using freeradius and no issues existed with windows clients connecting to the wireless.The SSID has wpa/wpa2, 802.1x authenticationInstalled ACS 5.3configured Store for LDAP - we don't use AD so don't recommend...

Hi all,I have all Laptop on Microsoft Active Directory(AD) and Wifi access point 4410N. The problem is that we don't have a WLC and when coporate Laptop is connect, the device is authentified like guest device. The device is redirect to guest portal,...