Network Access Control

Hello,Is there a way to disable accounting for a single Level 15 user? The NAC appliance has a level 15 service account, and consumes too much accounting DB space every time it logs to devices (the NAC runs 4 commands every time it logs to a device, ...

I want to download per user or per group ACL from ACS to IOS router ;where can I find the syntax to code the CISCO av-pair, in ACS, to allow such functions ?thanks in advance

hI  AllAbout to apply a patch for the first time on the ACS 5.3 tonight.Ihave tftp'd it onto a directory i have created on the server.However my support hints i may havre to rename the file ?is this true ?copy the latest patch file you got from Cisco...

I have been deploying IEEE802.1x to protect the ports on my network. This works well, when the protected ports are on a L2 access-only switch, that is to say, a switch that does not carry any SVIs or do any interVLAN routing. If I attempt to run IEEE...

Hi! Have anyone used a SMS OTP server connected to the Cisco ACS server? I.e. you give user+trigger pin when logon to a VPN client, wait for a SMS on your phone with a new OTP and be able to input that on the VPN client who have been waiting for this...

HiI have just renewed the self signed certificate on a v5.2 ACS and expiry date of 2013 is showing in the ACS GUI. However, when I start an ACS Admin session and view the certificate information in the browser it is showing the old expiry date of 201...

Is there any way to differentiate company asset & non company asset machines as both use same AD credentials but only difference is company asset is domain joined machines & non company asset only use AD credentials. We want to create different autho...

Hi, I replaced an ACS certificate that had been installed as follows: 1. Generate CSR file and private key file, then send CSR to GeoTrust (Key length: 2048 and Digest to sign with SHA1)2. GeoTrust send me a certificate. Issued by "GeoTrust SSL CA".3...

Hi,I was wondering about CISCO ISE Licensing.I have 1000 devices license base/advanced, lets say I want to connect like 700 bridges to it, is there a way to make them static and/or use default network access (like ACS) ? so they don't eat up my licen...

I have an ASA5505 running 8.2(5). It is configured with aaa authentication telnet console xxxxxx LOCALand I am able to use my username and password to telnet in, but I then have to use the local enable password to get to privilege exec mode.I tried c...

I need to update the ACS 5.2 appliances we have here and they do not currently have a software repository available. Is it possible to update them locally, either by buring the patch to a CD or with a thumb drive?        Ric James Sr. Network Enginee...

Hi,my question is what is the reason of such ACS behaviour? ACS is accessable from a router by ping and telnet, in logs I see 'key mismatch', but the key is 'cisco' at the bot ends. The aaa protocol is tacacs+.