Network Access Control

Hello,After power outage, when my ACS reboots the web interface doesn't start.When I connect to CLI with SSH, I enter the command :sh acs-config-web-interfaceThis is the result :ACS management must be runningPlease issue 'acs start' CLI if stopped, o...

message on ACS server:LI-LP-ACS01/DC-admin# application upgrade ACS_5.4.0.46.tar.gz FTPDo you want to save the current configuration ? (yes/no) [yes] ? Generating configuration...Saved the running configuration to startup successfully% Manifest file ...

Migrating from 4.2 to 5.2 acs and have noticed there is no expiration date per internal user added. We expire users at different times due to their time on site. Does anyone know if there is something that has to be added to get back this basic featu...

Hi EveryoneWe have 4 ACS 5.3 Servers connected as Primary and Secondary Servers.We use a "RSA SecurID Token Servers" External userdatabase for authentications and are able to sucessfully authenticate (vpn-)users when the requests are send from the pr...

Hi,I would like to enquire if it may be possible to assign an ipv6 address to ssl vpn user via ACS 5.4? I do understand that this may be perform using "Framed-IP-Address" radius attribute for IPv4. For ASA 9.0, it seems that it may make use of "vpn-f...

Hi all,Can anyone help me in resolving CoA using cisco ISE as getting below errorDynamic Authorization failed : 11215 No response has been received from Dynamic Authorization Client in ISERadius authentication failed for USER: CALLING STATION ID: 44:...

Hi NetproPls have a look to the attached , pls advisethanks

In a distributed ISE deployment with regional intermediate CA, I am getting failed authentication due to " EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain".  Client device have only one client certificate is...

Hi, I have a new CISCO AIRONET 1260 I have CISCO ACS 5.1 radius for VPN on ASA and tried to configure an NDG on it for AIRONET 1260 too and worked fine with IEEE 802.1x CISCO EAP-FAST authenticationAs I had some trouble to let users to authenticate o...

Hi there,Hope someone can give me a difinitive answer on this.Devices i have in use are:TACACS+ running on Cisco Secure ACS 5.2 (patch 5-2-0-26-10) on a 1121Cisco MDS9000 series SAN Switches (Been told it's at SAN IOS 5)I've carried out the following...

I want to use multiple cert (enterprise certs and verisign cert) for authentication in wireless.Users that have their computer in the domain should use EAP-TLS and PEAP (verisign) are for users in the domain but on non-domain computers.I can only ena...

Hi,We have setup a pair of a ACS v5.2 and have configured a remote syslog server on the CLI. Thus, we would like enquire will any logs for the CLI (eg user login and logout via SSH log, user login failure via SSH log) to the remote syslog server?Thks...