Network Access Control

Hello everyone , I´ve implemented 2 Cisco ISE v1.1 in HA to run MAB and 802.x Authentication / Authorization. Using Local ISE DB and Active Directory as an External Identity Source for wireless and wired users and devices. This was working fine 2 wee...

Hi,We have a customer which is using ISE with 802.1X in order to authenticate computers. All the computers have their own certificate and most of them can be authenticated fine! The issue is that some computers cannot be authenticated.The port config...

Hi All, We have configured teo ACS as TACACS servers for authentication on our switches . We have follwoing configuration :-tacacs-server host 10.X.X.Xtacacs-server host 10.X.Y.Ytacacs-server directed-request tacacs-server key 7 XXXXXXXXXXNow if we c...

Hi,I am trying to set up a switch to talk to our windows ACS 4.2 server and to enable the network team to login to the switch to carry out managment.The ACS has been in deployment as a radius server for a while, it's running out DOT1X authentication ...

I have an ASA 5520 8.2(5) with ACS 5.1, I made the configutation of Authentication and is working well, now how I can configure the authorization and get  into the privileged level 15 mode directly.Thanks.

Hello,I have following scenario: Computers are connected behind phones, and phones are authenticating with MAB. The problem is with phones, because they have two mac addresses one is in voice vlan and another is in data vlan. Both phone and computer ...

Does anyone know if a Security Group Tag (SGT) can be passed between layer 3 domains?Thanks in advanceAllen

          Hello, I've inherited a design for our Wired Guest Network (Security's policy prohibits any type of wireless in our facilities) to use the Cisco WebAuth solution, not as a fall back to 802.1x, but as a Guest Access solution in it's own righ...

Hello thereI have an ISE 1.1.1 setup, with a guest portal. The AD can be used to log onto this portal, and the Guest Portal Policy Configuration is on First Login.However, every time a AD user logs in on the portal, he has to accept the User Accept P...

Hi GuysI suffering a strange issue , I have two group users (wireless user , VPN users),I created a NAR To restrict users,, created two group NAR (network access restriction ) wirless group and vpn groupI attached wireless NAR group to wireless group...