Network Access Control

Hi all,i am using cisco ACS5.3 to gurant aaa services in my network witch comprise alcatel routers 7750 SR and SAM.Actually, the 7750SR is integrated the the ACS and the authentcation order is tacacs local, witch means that if the user is not in acs ...

I have ACS 5.3 running TACACS+ and Nexus 7K with 2 x non-default VDC's, VDC-OTV and VDC-CR.I want my TACACS account to have role "vdc-admin" on VDC-CR, and "vdc-operator" on VDC-OTV.What is the best way to achieve this?I tried putting the VDC's into ...

When booting up it gets stuck at:..........SELinux: Disabled at runtime.type=1404 audit(1363211439.273:2): selinux=0 auid=4294967295 ses=4294967295Please I need some advice. Attached is a pic I took

Hi thereI tried to configure TACACS+ authentication / authorization for NCS via ACS 4.2. For that I followed the configuration guide:1. Configured the service for NCS with HTTP (see attachment)2. Added the tasks to the user (see attachment)When I try...

Dear Team,I have faced an issue with dot1x mab authorization between cisco switch 3750 and ISE 1.1. I have cisco IP phone connected on port # gig1/0/1 to authenticated through MAB with cisco ISE--------------------------------------------------------...

I am doing ISE (1.1.1) deployment for client. The customer is using AD logon script do do drive map to a nas server. My posture remediation acl is blocking drive mapping unless I use 'permit ip any any' which is a security hole. My acl should be modi...

Hi...We recently installed a patch 5.3.0.40.2 in our ACS server. Post patch installation its showing wrong timestamp. ACS server clock and timezone configuration if correct but still logs showing wrong timestamp. We configurgure timezone Asia/Kalkota...

HiI have a certificate from GoDaddy and it contains:1st) Device2nd) Intermediate3rd) Root-----BEGIN CERTIFICATE-----blaablaablaaasdaas;dkjfa;sdkfj-----END CERTIFICATE----------BEGIN CERTIFICATE-----asdfasdfasdfasdfasdfasdfasdfd-----END CERTIFICATE---...

Hi,I'm trying to figure out what is the best way to limite access to Cisco switch. I'm using AAA and radius for authentication.My goal is to create a user that will have only "enable" access (all the show commands, etc..). I would like to deny access...

Hi all, In our scenario, easy vpn users are being authenticated by acs 5.3 successfully. We have created seperate user group for these users. The issue is, these users are also able to access our routers using their username/password. I want to restr...

Hi forumers'I have a POC situation as below:A policy to restirct contractor only able to log-in to the network using AP-01There's no problem for me to do the authentication and authorization rules for me to get the contractor connect, but my challeng...