Network Access Control

Hi everybody.I have a setup, containing 2x ACS 5.3 Servers and a 2960 Switch running Version 12.2(55)EX2.When the ACS Servers are going down, we are authorizing client to the critical VLAN. This works just fine.When the ACS Servers are coming up agai...

Hi, yesterday the local certificate on my primary ACS server expired and users immediately had issues getting on the network. As soon as I worked out what had happened I shutdown the ACS by the command 'acs stop'. The local certificate on the seconda...

HII am Puneet Gupta.We have Nexus7009 at client network but due to limitaion of Nexus switches that they can not be directly integrate Nexus with RSA so client has purchased cisco ACS for the AAA.We are able to do the authenication and autorization v...

Ciao,I not found a field for insert a description's  Mac Address. Is there a possibility in ISE to do this ?Iarno Pagliani

Hello,After power outage, when my ACS reboots the web interface doesn't start.When I connect to CLI with SSH, I enter the command :sh acs-config-web-interfaceThis is the result :ACS management must be runningPlease issue 'acs start' CLI if stopped, o...

message on ACS server:LI-LP-ACS01/DC-admin# application upgrade ACS_5.4.0.46.tar.gz FTPDo you want to save the current configuration ? (yes/no) [yes] ? Generating configuration...Saved the running configuration to startup successfully% Manifest file ...

Migrating from 4.2 to 5.2 acs and have noticed there is no expiration date per internal user added. We expire users at different times due to their time on site. Does anyone know if there is something that has to be added to get back this basic featu...

Hi EveryoneWe have 4 ACS 5.3 Servers connected as Primary and Secondary Servers.We use a "RSA SecurID Token Servers" External userdatabase for authentications and are able to sucessfully authenticate (vpn-)users when the requests are send from the pr...

Hi,I would like to enquire if it may be possible to assign an ipv6 address to ssl vpn user via ACS 5.4? I do understand that this may be perform using "Framed-IP-Address" radius attribute for IPv4. For ASA 9.0, it seems that it may make use of "vpn-f...

Hi all,Can anyone help me in resolving CoA using cisco ISE as getting below errorDynamic Authorization failed : 11215 No response has been received from Dynamic Authorization Client in ISERadius authentication failed for USER: CALLING STATION ID: 44:...

Hi NetproPls have a look to the attached , pls advisethanks

In a distributed ISE deployment with regional intermediate CA, I am getting failed authentication due to " EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain".  Client device have only one client certificate is...

Hi, I have a new CISCO AIRONET 1260 I have CISCO ACS 5.1 radius for VPN on ASA and tried to configure an NDG on it for AIRONET 1260 too and worked fine with IEEE 802.1x CISCO EAP-FAST authenticationAs I had some trouble to let users to authenticate o...

Hi there,Hope someone can give me a difinitive answer on this.Devices i have in use are:TACACS+ running on Cisco Secure ACS 5.2 (patch 5-2-0-26-10) on a 1121Cisco MDS9000 series SAN Switches (Been told it's at SAN IOS 5)I've carried out the following...

I want to use multiple cert (enterprise certs and verisign cert) for authentication in wireless.Users that have their computer in the domain should use EAP-TLS and PEAP (verisign) are for users in the domain but on non-domain computers.I can only ena...