Network Access Control

Attribute for Client IP in Radius Access/Accounting Requests.

Hello,I just have one quick question. What is the name of Radius Attribute that carries Client IP address(from Cisco WLC) in Radius Access/Accounting Requests to the Radius Server? Can somebody confirm whether it is the Framed-IP Address or not?Appre...

Resolved! ISE Captive Portal & redundancy

I have a guest SSID configured in my WLC. I also have 2 ISE appliances (Primary/Secondary) that I use to do the web auth on my guest SSID.In the config of my SSID (Security / Layer 3 / Web Policy), I selected "Web Auth Type: External" and I had to en...

Resolved! ISE and certificates

Hi all,Im trying to get my head around using 3d party certificates with the ISE and I think I need some guidance here.I have a setup of 6 ISE nodes, 2xAdmin, 2xMonitoring and 2xPolicy.All of these have the domain-name of abc.local.I want to use MS-CH...

Resolved! Authenticate against AD then Internal Store with same username?

I know this sounds easy at first glance but I am having a nightmare of a time finding a way to get this to work. Our engineers were used to OUR old ACS 3.2 method where an account was either authenticated against the internal user store or Wwindows ...

Resolved! force acs v.5 to join domain with a certain Domain Controller

Hi everybody,I try to join an ACS v. 5.3 to the domain. For my acs in Location A, I can join without problems using my account. When I try to join the ACS in location B to the same domain with the same account, it doesnt work.I looked at the deb...

Resolved! NAC Agent and NSP provisioning with ISE 1.1.1

I am trying to get all workstations (OSX and Windows) to install both the Native Supplicant Wizard and NAC Agent during the On-boarding process.I am currently using the default guest portal in ISE.The environment has been setup using a Dual SSID desi...

Resolved! ACS 5.x TACACS/Radius password policy profile for different Users

Hi Folks, I just came across a requirement, of implementing different password policies for different group users. I would be glad if any close hint which can help to implement this kind of policy.I can see in >>>>SYSTEM CONFIGURATION>>>>User>>AUTHEN...

ACS 4.2, User Import Question

Hello allI need to import approx. 700 username/passwords into ACS 4.2. I have the documentation from here: http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007e689.htmlThe link shows the import file and how t...

Resolved! ISE appliance, link faiulre

what if that only network interface on the appliance goes down?what if I have two core switches configured for failover and the one connected to that single interface goes down?are there any options for link aggregation or link failover?ty

Windows Server 2008 R2 RADIUS Authentication

Hi,I have implemented RADIUS so that users in a windows group are able to login to a Cisco device using their windows login. The issue I have is that users in this group are also able to authenticate through radius for the remote access vpn (on a ASA...

Web authentication on router

Hi Everyone.I need a feature which could control the network access and permit traffic only from users that provide proper credentials. In branch office there are few users - all network services are located in central office.Users access them via IP...

AAA & SSH question

Hi~I have an authentication problem, my config is as follows:1. When I use telnet, "% Authorization failed."2. When I use ssh, enter the username without entering the password can authenticatoin success3. Use ssh authentication is successful not see ...

abdul

Bonjour,I deploy an ise primary node and about to declare the secondary node and inline posture node to the primary. when doing so I obtain this message "Unable to authenticate ISE secondary_ise_name. Please check server and CA certificate configurat...

ACS 5.3 - 5411 EAP session timed out

I've got ACS currently authenticating wireless users - using EAP-MSCHAPv2. There are a large number of failures being reported as: 5411 EAP session timed out DescriptionThis may be due to EAP misconfiguration on ACS or Network Device.Resolution ...

AnyConnect and ACS5.1

Hello Team,i'am having a problem with following setup. Cisco ASA 5520 with ACS 5.1. I'd like to have multiple SSL VPN Client Connection Profiles which is already working fine. Each Profile should use an idividual Service Selection Rule in the ACS.I t...

Network Access Control

Forum Posts

Attribute for Client IP in Radius Access/Accounting Requests.

Resolved! ISE Captive Portal & redundancy

Resolved! ISE and certificates

Resolved! Authenticate against AD then Internal Store with same username?

Resolved! force acs v.5 to join domain with a certain Domain Controller

Resolved! NAC Agent and NSP provisioning with ISE 1.1.1

Resolved! ACS 5.x TACACS/Radius password policy profile for different Users

ACS 4.2, User Import Question

Resolved! ISE appliance, link faiulre

Windows Server 2008 R2 RADIUS Authentication

Web authentication on router

AAA & SSH question

abdul

ACS 5.3 - 5411 EAP session timed out

AnyConnect and ACS5.1

Default Route SGT

PX Grid Connector and Service NOW

ISE Posture: secure client stops posture synchronization

Posture Script Condition–Fails to Connect When SHA-256 Fingerprint Add

Is it possible to use "PostureOS" attribute in ISE Profiling Policy

ISE Dot 1 X Authentication

Problem with PSN ISE node (error 5405 Radius session drop)

Update DNS in ISE really this hard/bad?

ExternalGroups in REST ID (Azure AD) in Authorization Policy

ISE TACACS log backup restore