Network Access Control

I have ACS 5.3 running TACACS+ and Nexus 7K with 2 x non-default VDC's, VDC-OTV and VDC-CR.I want my TACACS account to have role "vdc-admin" on VDC-CR, and "vdc-operator" on VDC-OTV.What is the best way to achieve this?I tried putting the VDC's into ...

When booting up it gets stuck at:..........SELinux: Disabled at runtime.type=1404 audit(1363211439.273:2): selinux=0 auid=4294967295 ses=4294967295Please I need some advice. Attached is a pic I took

Hi thereI tried to configure TACACS+ authentication / authorization for NCS via ACS 4.2. For that I followed the configuration guide:1. Configured the service for NCS with HTTP (see attachment)2. Added the tasks to the user (see attachment)When I try...

Dear Team,I have faced an issue with dot1x mab authorization between cisco switch 3750 and ISE 1.1. I have cisco IP phone connected on port # gig1/0/1 to authenticated through MAB with cisco ISE--------------------------------------------------------...

I am doing ISE (1.1.1) deployment for client. The customer is using AD logon script do do drive map to a nas server. My posture remediation acl is blocking drive mapping unless I use 'permit ip any any' which is a security hole. My acl should be modi...

Hi...We recently installed a patch 5.3.0.40.2 in our ACS server. Post patch installation its showing wrong timestamp. ACS server clock and timezone configuration if correct but still logs showing wrong timestamp. We configurgure timezone Asia/Kalkota...

HiI have a certificate from GoDaddy and it contains:1st) Device2nd) Intermediate3rd) Root-----BEGIN CERTIFICATE-----blaablaablaaasdaas;dkjfa;sdkfj-----END CERTIFICATE----------BEGIN CERTIFICATE-----asdfasdfasdfasdfasdfasdfasdfd-----END CERTIFICATE---...

Hi,I'm trying to figure out what is the best way to limite access to Cisco switch. I'm using AAA and radius for authentication.My goal is to create a user that will have only "enable" access (all the show commands, etc..). I would like to deny access...

Hi all, In our scenario, easy vpn users are being authenticated by acs 5.3 successfully. We have created seperate user group for these users. The issue is, these users are also able to access our routers using their username/password. I want to restr...

Hi forumers'I have a POC situation as below:A policy to restirct contractor only able to log-in to the network using AP-01There's no problem for me to do the authentication and authorization rules for me to get the contractor connect, but my challeng...

Hi all, Would like to check out is it possible  binding Cisco secure ACS 5.x to support router/switch ios feature view -  superview and parser commandBusines objective is assigning administrative roles, with different role based CLI access, using ACS...