Network Access Control

HelloWe want to use ACS in our wireless network, but we would like to allow users to change their own passwords, so we want to use UCP.Additionally, we want to force them to change their passwords after a period of time or number of logins.Is it poss...

Hi,I'm trying to create a custom report in ISE from the default report in the catalog AAA Protocols > Radius Authentications.I'm able to open it and then I click on the "Launch Interactive Viewer" which gives me the editing controls.  However, all bu...

Hi guys. I´m implementing a Cisco ISE in customer now and I have the follow state: AUTHENTICATIONmab > wired_mab OR wireless_mab > default network protocos > internal endpointsemployee > wired_802.1x OR wireless_802.1x > Radius Server SequenceGuest >...

Hi All,Is it possible to encrypt ACS 5.4 backups?Based on the documentation it seems to be clear-text, so is there is a way to encrypt ACS backups so only the ACS can read and understand them?I'm asking specifically of ACS performed backup so others ...

I want to deploy CAS inband virtual Gateway mode. My Untrusted Side has 5 vlans so it will defenately be trunk cable to eth1 (Untrusted).My Question is that can i provide eth1 IP from any of existing vlans or should i create new managment VLAN ans as...

Hello everyone,I am using the AnyConnect Network Access Manager as a 802.1x supplicant (with an ACS 5.4 as authentication server). The authentication process works like a charm but there is one issue that the users here do not like. There is a popup ...

Hi,I'm running Cisco ISE 1.1.3.124 and a Cisco IOS 2811 (c2800nm-spservicesk9-mz.150-1.M2.bin) which I configured the be a SCEP server.PKI Authentication and enrollment of a Cisco switch with this SCEP server is running well but BYOD clients enrollme...

Dear Alli am running ASA5520 security appliance and have trouble to login to this devicewe have used 2 ACS servers for example xxx.xxx.xxx.xxx and yyy.yyy.yyy.yyyfirst priority is xxx.xxx.xxx.xxx and yyy.yyy.yyy.yyy is backuprecently we have removed ...

Hi all,i am using cisco ACS5.3 to gurant aaa services in my network witch comprise alcatel routers 7750 SR and SAM.Actually, the 7750SR is integrated the the ACS and the authentcation order is tacacs local, witch means that if the user is not in acs ...

I have ACS 5.3 running TACACS+ and Nexus 7K with 2 x non-default VDC's, VDC-OTV and VDC-CR.I want my TACACS account to have role "vdc-admin" on VDC-CR, and "vdc-operator" on VDC-OTV.What is the best way to achieve this?I tried putting the VDC's into ...

When booting up it gets stuck at:..........SELinux: Disabled at runtime.type=1404 audit(1363211439.273:2): selinux=0 auid=4294967295 ses=4294967295Please I need some advice. Attached is a pic I took

Hi thereI tried to configure TACACS+ authentication / authorization for NCS via ACS 4.2. For that I followed the configuration guide:1. Configured the service for NCS with HTTP (see attachment)2. Added the tasks to the user (see attachment)When I try...

Dear Team,I have faced an issue with dot1x mab authorization between cisco switch 3750 and ISE 1.1. I have cisco IP phone connected on port # gig1/0/1 to authenticated through MAB with cisco ISE--------------------------------------------------------...

I am doing ISE (1.1.1) deployment for client. The customer is using AD logon script do do drive map to a nas server. My posture remediation acl is blocking drive mapping unless I use 'permit ip any any' which is a security hole. My acl should be modi...