Network Access Control

Resolved! HA ACS in two different subnets.

Hello, I have to configure two ACS 1113 ver 4.1 (4) high reliability, in two different places and two different subnets. An apparatus will have to manage an office, the second the other office, but if one goes down the other takes responsibility for ...

NAC agent loop and don't launch on some computer

Hi, NAC agent is loop when it starts and does not run on some computers.What can be these problems?

Problem to authenticate MAC address on ISE

Hi guys,I have a Lab with a ISE ver 1.1.1 installed on VMWARE, a Switch 3750, a WLC 4200 and one AP registered on WLC, the WLC and AP are connected to Switch, we are testing the user authentication using a samsung tablet and it work ok. The authentic...

Radius COA message to 3845 not working

I have a cisco 3845 running 12.4(15)T10.I can send a POD and disconnect my session. But when I try to send a COA, I always get back the same error. Here is the debug log:*Sep 14 17:25:16.017: COA: 172.16.XX.XX request queued*Sep 14 17:25:16.017: ++...

Resolved! ACS 4.2 user group mapping

Hi,We are using ACS 4.2.1.15 with patch 8 on ACS 1113 SE box.Our requirement is to assign ACS loal group to user on basis of windows Nt group. Which means I dont wants to create individual users in ACS rather when user will login, the auth request wi...

Can i know how many newtork devices can Cisco Secure ACSv4.1 support is there any limit on the same? It would be great if I get the Specs of Cisco Secure ACSv4.1 on the above grounds...

Resolved! Cisco ACS 5.2 Service Selection Rule

Hello Dears,I'm trying to setup the Cisco ACS 5.2 to do Dot1x Authentication for clients on windows 7 & windows XP, I did all the steps but I couldn't create Service Rule, it's giving me an error message you can see it in the attached screenshot.afte...

http profiling

Hi,Did anyone try WLC 7.3 Http profiling - • Support for detection and forwarding of the first HTTP packet with a user-agent attribute from a client per session to profile the client, where the controller acts as a collector, is added in this release...

connect some users on ISE Secondary node

Is it possible to connect users on secondary node?I tried it. I configure one switch to connect on the secondary node. A computer on that switch communicate with the secondary node and get and IP address from the DHCP. but It cannot download DACL.

Resolved! URL Logging for Guest Traffic using Guest Anchor and ISE

Hi there all,I'm looking for a solution whereby I can log URL information for wireless guest users to ISE. The anchor WLC sits in a DMZ behind an ASA and the ISE is on the internal network. I found this document (see URL below) which is similar but u...

ACS 5.3 Backup idea

IS this below alerts 1 . Incremental Backup Not Configured and Purge Configuration Repository not configured is must ? or it leads to any issues in future ? <TABLE style="BORDER-BOTTOM: #fc8932 1.5pt outset; BORDER-LEFT: #fc8932 1.5pt outset; WID...

Resolved! Critical Authentication VLAN

HelloI have got a problem with the critical authentication vlan. The connection to the radius-server works. If I cut the connection to the server, then moves the cisco cathalyst all new hosts in the critical vlan. When the radius-server is reachable ...

ASA VPN Radius Framed IP with IPEP

Is there a way to set the radius framed IP attribute to the value from Active Directory msRadiusFramedIP while using IPEP? I can't seem to add any attributes to the Inline Posture Node Profiles. I can set the radius framed IP under the regular Auth...

Upgrading NAC Guest server to 2.0.5

Our NAC server is currently running on 2.0.2, we must first upgrade the system to Release 2.0.3 and then to Release 2.0.5.I got 2.0.5 software upgrade procedure ,but did not find 2.0.3.Please provide the procedure how to upgrade NAC software to 2.0.3...

web admin password recovery for nac server applicance 3355

Hi,What is the procedure for web admin password recovery for nac server applicance 3355?

Network Access Control

Forum Posts

Resolved! HA ACS in two different subnets.

NAC agent loop and don't launch on some computer

Problem to authenticate MAC address on ISE

Radius COA message to 3845 not working

Resolved! ACS 4.2 user group mapping

Can i know how many newtork devices can Cisco Secure ACSv4.1 support is there any limit on the same? It would be great if I get the Specs of Cisco Secure ACSv4.1 on the above grounds...

Resolved! Cisco ACS 5.2 Service Selection Rule

http profiling

connect some users on ISE Secondary node

Resolved! URL Logging for Guest Traffic using Guest Anchor and ISE

ACS 5.3 Backup idea

Resolved! Critical Authentication VLAN

ASA VPN Radius Framed IP with IPEP

Upgrading NAC Guest server to 2.0.5

web admin password recovery for nac server applicance 3355

EAP-TLS Device Certificate for Entra Joined Devices with Intune

Posture assessment report never finishing

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

PX Grid Connector and Service NOW

Scenario ISE-Pri dead and promote ISE-Sec to Primary

can no longer ssh into the Primary Admin/Secondary MnT node

NTLM Disabled and ISE-PIC

Impact of Resetting ISE Context Visibility on Endpoint Connectivity

Cisco ISE posture for Wi-Fi is stuck on Action Needed