Network Access Control

Here is a snippet of my proposed config for LDAPaaa group server ldap AD server TESTSERVERldap attribute-map ADTESTldap server TESTSERVER ipv4 192.168.0.20 bind authenticate root-dn testuser password testpw base-dn DC=testdomain,DC=localThe username ...

I have installed ACS 5.2 on a VM. The install seemed to go ok as did the set-up procedure. However the management process will not start it always stays in the initialising state and thus I am unable to load the web GUIThe VM has the following config...

Only one question for me. Struggeled to find the answer in any documentation. In the new 4.9 release for NAC: when deploying OOB L3: Will wireless users and wired users be able to connect to the same CAS. Wireless LAN controllers for the Access Point...

Hello,I want to use Network Access Manager with Anyconnect.I configured a WiFi network with EAP-TLS authentication.The certificate used for EAP-TLS has the following EKU: - clientAuth (1.3.6.1.5.5.7.3.2)- emailProtection (1.3.6.1.5.5.7.3.4)- msSmartc...

Hi,I have a requirement to fall back to local accounts when ACS is down. These accounts will have specific privilege levels. I have two local users - adminro and adminrw. adminro is read only and will have a privilege level of 7.adminrw is a full acc...

HiI'm strugling with TACACS+ and priv levels, and hoping someone out there can help me solve an issue.So, in this enviroment we need the following:Read-only usersUsers with access to some configuration commands.Okay, the TACACS configuration for the ...

Hi,The ADclient service restarted automtically causing disruption in authentication.Upgraded the patch to 5.2.4 but after 4 days the service restarted again.Model: ACS SE 1120Version: 5.2.0.26.4Kindly suggest to avoid the service restart.

Hi,     Has anyone out there managed to configure a BBlue Coat ProxySG device to authenticate with a ACS server using Radius? I am currently running v4.1 ACS and the Blue Coat device is a ProxySG Model 210.(running SGOS 6.1)I have configured the Blue...

HiJust looking if anyone know how to delete the accounting/authorization Reports or logs ?Screenshot has attached herewith for reference.Thanks.RegardsSantosh

All,Very basic failure here I've replicated on both VMWare and 1120 hardware appliance.1. Run a full install (fresh reimage), allow the system to start fully.  Ensure DNS is ok and the server can ping the gateway etc.2. Patch straight to 5.2.0.26.3 v...

Hi, anyone know the OID or MIB name for Active TACACS and Radius authentication? like to use some NMS tool to pull out this information for monitoring.

Hi Experts ,Can anyone please tell me the procedure how to  upgrade fromACS 4.0 to 4.2.1  with data restoring .Please guide me with the upgrade path and the step by step procedure .Currently i am running with 4.0 i need to upgrade to 4.2.1 windows.Th...

Hello folks,We are trying to make a restore from the backup done on ACS version 5.1 to a new appliance running ACS5.2Before doing it I found this note in Cisco ACS user guide:Note: You cannot back up data from an earlier version of ACS and restore it...

Dear All,As Cisco ACS/ ISE is capable of Machine Authentication such as checking if the machine is joined to domain through certificate, is it possible by using dot1x restrict user to logon to windows domain instead of logging locally on the windows ...