Network Access Control

Hi, I have a new CISCO AIRONET 1260 I have CISCO ACS 5.1 radius for VPN on ASA and tried to configure an NDG on it for AIRONET 1260 too and worked fine with IEEE 802.1x CISCO EAP-FAST authenticationAs I had some trouble to let users to authenticate o...

Hi there,Hope someone can give me a difinitive answer on this.Devices i have in use are:TACACS+ running on Cisco Secure ACS 5.2 (patch 5-2-0-26-10) on a 1121Cisco MDS9000 series SAN Switches (Been told it's at SAN IOS 5)I've carried out the following...

I want to use multiple cert (enterprise certs and verisign cert) for authentication in wireless.Users that have their computer in the domain should use EAP-TLS and PEAP (verisign) are for users in the domain but on non-domain computers.I can only ena...

Hi,We have setup a pair of a ACS v5.2 and have configured a remote syslog server on the CLI. Thus, we would like enquire will any logs for the CLI (eg user login and logout via SSH log, user login failure via SSH log) to the remote syslog server?Thks...

We have configured following commands on switch to fallback to local Vlan if both radius server (policy persona's) is found dead. For test purpose we shutdown both servers (policy persona's) but fallback didn't work. We have 3750 switch running image...

I've got a strange situation where our ACS seems to be disconnecting network devices periodically.  Some of the logs make me thinking there's an issue w/ our AD setup, others point to runtime issues w/ in the ACS.  Typically its just a quick drop and...

Dears,I have this case and I would be very thankful if someone has the answer for ! When Wired AutoConfig service is enabled on a Windows XP (or 7) station that is connected to an IP phone, the "Additional Information is needed to connect to this net...

Scenario:ACS 5.3 configured with two rules, 1 rule for standard level 15 access for the Network Engineers and a 2nd rule to allow some limited access to switches: The limited access account has enough command set access to change the vlan on a switch...

Hi Guys,Is it possible to setup the ISE to automatically send a self-service guest their credentials via email once they've registered as appose to simply showing them onscreen ?I know it's possible to do so once they've registered through the sponso...

HiSetup. I want to be able to deny wireless network access for some computers during periods.This is done ny moving the computer object to a specific AD group and use this in the ISE AuthZ policy. Authentication is done with PEAP-MSCAHPv2 on the SSID...