Hello Everyone,Can a single ACS appliance be integrated with a diff OU in the AD (maybe with a diff IP address range). If yes, how?Thanks,Rishi
Hello Everyone,Can a single ACS appliance be integrated with a diff OU in the AD (maybe with a diff IP address range). If yes, how?Thanks,Rishi
I am having difficulty with AAA setup on my recently upgraded ASA 5520. I upgraded from 8.3(1) to 8.4(4) and my AAA no longer works. If I use Kerberos I receive time skew errors (works fine on my remaining 8.3(1) ASAs) and when I setup LDAP I get "...
Hi all,I have a Cisco ACS server deployed for TACACS and RADIUS authentication for end users.Everything works well, it is joined to the domain, people can auth most of the time. However it appears that ACS is trying to auth against *ANY* DC within my...
helloi'm running into some problems with ACS 5 and the External Proxy Access Service policy. The issue is the same as outlined here: https://supportforums.cisco.com/thread/2075329 i've also tried this with ACS 5.2 and 5.3. when i use the External Pro...
Hello guys,I need help for deploying Cisco NAC on remote branch. i did all the necesary steps & configs but still no luck, On main site we have OOB-Real IP Gateway deployment. all the campus is deployed but for remote branch it is not working, we hav...
Hi there,I have an issue with ACS 5.3. i have configured different user groups and different devices., integrated it with active directory and all seems to be working good.internal users and AD users are successfully authenticated and the authorizati...
Hello,I would like to know is it possible to have only machine authentication (No user auth at all) in ISE infrastructure. If yes then what credential need to be provide at the time of 802.1X auth login or there is no need to provide any credential a...
Hi ALLCurrently trying to set up the above so that if an access service is not matchedthen it will go to the next one.Looking at the logs what happens is - our auth is set to AD so it matchesthat - then it isnt in the correct ext AD group and goes to...
Hi all,I got a Question to the context directory agent.We are using windows 2008r2 nap for 802.1x authentication on switch ports.Would it be possible to use the radius accounting for the CDA to assign the user ip mapping?Or is the radius authorisatio...
Hi Security Experts,I need to add RADIUS attributes for a custom vendor under "Group Setup" page in ACS 4.2. As of now, I see Cisco Aironet RADIUS Attributes, IETF RADIUS Attributes etc in "Group Setup" page. How can I make sure that the RADIUS attri...
Hi Security Experts,I have a requirement to add a third-party box (niksun appliance used for sniffing packets) as a radius client in ACS 4.2. I have gone through the configuration guide of niksun to see how it should be done. As per their documentati...
Do ISE 3355 and 3315 support etherchannel configuration?And I see that they have four gigabit ethernet NICs, but two of the NICs need add-on cards? Does that mean that only two (out of the available four NICs) are ready to be used without installing ...
Hi,It´s possible to enable unconditional machine authentication in ACS 5.3.Best Regard,Marco Huaynater Ricaldi.
Hello guys, I've noticed a strange behaviour with AAA authentication login. My AAA configuration for login authentication is: aaa authentication login default group tacacs+ localNo tacacs server exists, but username and password in local database doe...
Hi, within ACS 5.3, I'd like to use 2 external authenticator for the same service, like vpn remote-access.For the authentication, I know I can create an identity chain, to query SecurID and then AD, in case of user not found in SecurID.For the author...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Subject | Author | Posted |
---|---|---|
09-12-2024 09:12 PM | ||
09-10-2024 01:21 AM | ||
08-18-2024 06:58 PM | ||
07-29-2024 12:35 AM | ||
07-28-2024 10:24 PM |