Network Access Control

Hi,I am having the Cisco NAC enviroment (Software Version is 4.9.1) and OOB VG.We are getting the below and attached Error while deploying on some machines. "Invalid switch configuration-OOB Error:OOB client "mac/ip" not found."Some users on same swi...

Hi All,I would like to authenticate client by using External RADIUS. Once I create authentication policy using the new compound condition (wireless dot1x + Radius Username Matches "domainB\") I would like to forward the user authentication who make a...

I want to make another guestportal because the default one's language is incorrect. You can change the language of the sponsor portal quite easily but for the guestportal you have to adjust the html pages. I tried this but couldn't get the layout cor...

Hello All,We have an IAS (Internet Authentication Server) to authenticate all our network devices. This server is integrated with our local AD server so that we can use our domain credentials to login into the netwoerk devices. i have successfully co...

Currently, we are configured in a Primary/Secondary with two Cisco ACS 1121 Applainces running   Version 5.3.40.1.  We want to uipgrade to teh lastest patch, which was patch 5. I know I need to deregister the backup and then upgrade the primary.  Whi...

                   HiI have installed ACS appliance version 5.1.0.44 in my office.I tried to check TACACS accounting for what command the engineers used but I couldnt find the outputs.Please advse how to get it.This is my configurtion.aaa new-modelaa...

Hi,I'm currently in the process of deploying 802.1x across 10,000 devices - Avaya IP phone, Hp t510 Thin Clients and a mixture of WinXP SP3 and Windows 7The bombshell has been dropped that our desktop guys are going to use SCCM 2007 to manage/re-imag...

Hi,I want your help to advise how to mitigate to voice vlan hopping attack.First Scenario : PC behind IP Phone : the PC will send 802.1q tag including VID of Voice VLAN. Then, the PC will get IP Address automatically from voice vlan subnet.Solution :...

Hi All,I've got a split domain setup, with 8 ISE nodes on the inside network, and 2 nodes on a DMZ in a different DNS domain.When we first set this up a few months ago, it turned out that there was a bug that didn't allow multiple domains, and we tes...

Dear Alli got the ACS 5.1 at work..after migrating the data from 4.1 a lot of data got changed into the 4.1 so I needed to reset my configuration (since i played around with the 5.1)after doing so, I can't access the web page, to start the configurat...

Hi,I am trying to set up device (laptops/desktop XP and Vista, iPhone, tablet) and user authentication. Mostly to diferentiate corp and private devices. So far I have successfully been able to authenticate wireless users that is in a AD group, using ...

I am seeing a weird problem.I deregistered secondary admin/monitor node from primary admin/monitor node. I see successfully deregistered message.But the deregistered node is still showing SEC(A) and SEC(M). It is not changing to standalone mode.This ...

Hello,ich would like to setup a BYOD enviroment withe the ISE. An i would like to use WLAN with EAP-TLS, so i need the deployment of certificates to the WLAN clients.All configurations examples i have seen use the Microsoft CA / SCEP. That's not my c...

Just to check if anyone might be able to assist me regarind an issue that I am trying to work out a solution for.My Requirements are: Multitenant deployment using ASR1K with IKEv2 vpn authenticated with ISE or ACS and user databases in most cases wil...