Network Access Control

Hi,I´m currently setting a LAB in order to test NEAT feature. The Supplicant switch (sSW) is able to authenticate toward the Authenticator Switch (aSW).sSW#sh cisp summaryCISP is running on the following interface(s):---------------------------------...

I have aaa authentication working on my ASA with no problem. I have command authorization working for my account on all my IOS devices with TACACS+ and a Cisco ACS. I can not get command authorization to work on the ASA. Every time I enter the 'aaa a...

Does anyone have a good sample screen shot of a Windows and Macintosh posture agent profile to use?  I have been using one on Cisco's website that seems to make the NAC agent take a long time to actually load.  I guess the biggest thing with the prof...

Hi,I am having the Cisco NAC enviroment (Software Version is 4.9.1) and OOB VG.We are getting the below and attached Error while deploying on some machines. "Invalid switch configuration-OOB Error:OOB client "mac/ip" not found."Some users on same swi...

Hi All,I would like to authenticate client by using External RADIUS. Once I create authentication policy using the new compound condition (wireless dot1x + Radius Username Matches "domainB\") I would like to forward the user authentication who make a...

I want to make another guestportal because the default one's language is incorrect. You can change the language of the sponsor portal quite easily but for the guestportal you have to adjust the html pages. I tried this but couldn't get the layout cor...

Hello All,We have an IAS (Internet Authentication Server) to authenticate all our network devices. This server is integrated with our local AD server so that we can use our domain credentials to login into the netwoerk devices. i have successfully co...

Currently, we are configured in a Primary/Secondary with two Cisco ACS 1121 Applainces running   Version 5.3.40.1.  We want to uipgrade to teh lastest patch, which was patch 5. I know I need to deregister the backup and then upgrade the primary.  Whi...

                   HiI have installed ACS appliance version 5.1.0.44 in my office.I tried to check TACACS accounting for what command the engineers used but I couldnt find the outputs.Please advse how to get it.This is my configurtion.aaa new-modelaa...

Hi,I'm currently in the process of deploying 802.1x across 10,000 devices - Avaya IP phone, Hp t510 Thin Clients and a mixture of WinXP SP3 and Windows 7The bombshell has been dropped that our desktop guys are going to use SCCM 2007 to manage/re-imag...

Hi,I want your help to advise how to mitigate to voice vlan hopping attack.First Scenario : PC behind IP Phone : the PC will send 802.1q tag including VID of Voice VLAN. Then, the PC will get IP Address automatically from voice vlan subnet.Solution :...

Hi All,I've got a split domain setup, with 8 ISE nodes on the inside network, and 2 nodes on a DMZ in a different DNS domain.When we first set this up a few months ago, it turned out that there was a bug that didn't allow multiple domains, and we tes...