Network Access Control

Authenctication error in ACS 5.3

Hi Guys,I configured ACS 5.3 and added AAA clients with TACACS+ server and shared secret key as cisco123. i did the below config on switch also. when i try to authenticate login with ACS it does not respond. Find the configuration and debug output.nd...

Attribute for Client IP in Radius Access/Accounting Requests.

Hello,I just have one quick question. What is the name of Radius Attribute that carries Client IP address(from Cisco WLC) in Radius Access/Accounting Requests to the Radius Server? Can somebody confirm whether it is the Framed-IP Address or not?Appre...

Resolved! ISE Captive Portal & redundancy

I have a guest SSID configured in my WLC. I also have 2 ISE appliances (Primary/Secondary) that I use to do the web auth on my guest SSID.In the config of my SSID (Security / Layer 3 / Web Policy), I selected "Web Auth Type: External" and I had to en...

Resolved! ISE and certificates

Hi all,Im trying to get my head around using 3d party certificates with the ISE and I think I need some guidance here.I have a setup of 6 ISE nodes, 2xAdmin, 2xMonitoring and 2xPolicy.All of these have the domain-name of abc.local.I want to use MS-CH...

Resolved! Authenticate against AD then Internal Store with same username?

I know this sounds easy at first glance but I am having a nightmare of a time finding a way to get this to work. Our engineers were used to OUR old ACS 3.2 method where an account was either authenticated against the internal user store or Wwindows ...

Resolved! force acs v.5 to join domain with a certain Domain Controller

Hi everybody,I try to join an ACS v. 5.3 to the domain. For my acs in Location A, I can join without problems using my account. When I try to join the ACS in location B to the same domain with the same account, it doesnt work.I looked at the deb...

Resolved! NAC Agent and NSP provisioning with ISE 1.1.1

I am trying to get all workstations (OSX and Windows) to install both the Native Supplicant Wizard and NAC Agent during the On-boarding process.I am currently using the default guest portal in ISE.The environment has been setup using a Dual SSID desi...

Resolved! ACS 5.x TACACS/Radius password policy profile for different Users

Hi Folks, I just came across a requirement, of implementing different password policies for different group users. I would be glad if any close hint which can help to implement this kind of policy.I can see in >>>>SYSTEM CONFIGURATION>>>>User>>AUTHEN...

ACS 4.2, User Import Question

Hello allI need to import approx. 700 username/passwords into ACS 4.2. I have the documentation from here: http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007e689.htmlThe link shows the import file and how t...

Resolved! ISE appliance, link faiulre

what if that only network interface on the appliance goes down?what if I have two core switches configured for failover and the one connected to that single interface goes down?are there any options for link aggregation or link failover?ty

Windows Server 2008 R2 RADIUS Authentication

Hi,I have implemented RADIUS so that users in a windows group are able to login to a Cisco device using their windows login. The issue I have is that users in this group are also able to authenticate through radius for the remote access vpn (on a ASA...

Web authentication on router

Hi Everyone.I need a feature which could control the network access and permit traffic only from users that provide proper credentials. In branch office there are few users - all network services are located in central office.Users access them via IP...

AAA & SSH question

Hi~I have an authentication problem, my config is as follows:1. When I use telnet, "% Authorization failed."2. When I use ssh, enter the username without entering the password can authenticatoin success3. Use ssh authentication is successful not see ...

abdul

Bonjour,I deploy an ise primary node and about to declare the secondary node and inline posture node to the primary. when doing so I obtain this message "Unable to authenticate ISE secondary_ise_name. Please check server and CA certificate configurat...

ACS 5.3 - 5411 EAP session timed out

I've got ACS currently authenticating wireless users - using EAP-MSCHAPv2. There are a large number of failures being reported as: 5411 EAP session timed out Description This may be due to EAP misconfiguration on ACS or Network Device.Resolution...

Network Access Control

Forum Posts

Authenctication error in ACS 5.3

Attribute for Client IP in Radius Access/Accounting Requests.

Resolved! ISE Captive Portal & redundancy

Resolved! ISE and certificates

Resolved! Authenticate against AD then Internal Store with same username?

Resolved! force acs v.5 to join domain with a certain Domain Controller

Resolved! NAC Agent and NSP provisioning with ISE 1.1.1

Resolved! ACS 5.x TACACS/Radius password policy profile for different Users

ACS 4.2, User Import Question

Resolved! ISE appliance, link faiulre

Windows Server 2008 R2 RADIUS Authentication

Web authentication on router

AAA & SSH question

abdul

ACS 5.3 - 5411 EAP session timed out

I have a question regarding the deployment of the ISE-PIC agent. Is it

Necesito configurar un portal de invitados "hibrido" en ISE 2.7

ISE Accept certificates without validating purpose will break 802.1AR

Cisco ISE JSON SMS

CSCwn25013 - ISE 3.2 P7: Patch install breaks db-reset

Cisc ISE Virtual appliance

ISE certificates

ISE-PIC not receiving active sessions — only 5–6 users every few hours

CSCwq14246 - ISE internal disk check - ISE VM read/write issues

Cisco Catalyst 1300 and Dynamic VLAN