Network Access Control

Framed IP Attribute missing in Accounting-Start messages from the ISG for the TAL Users. Account-Logon users and Interim updates have the Framed-IP though. We have the following command already enabled: aaa accounting include auth-profile framed-ip-a...

Hi,i have planned a deployment with one acs in Europe working as primary, one acs in europe as secondary and one acs in USA as secondary also.I can add one acs in europe to the deployment as secondary.When I try to add the acs in USA to the deploymen...

I would like to get radius or tacacs+ working with the new CP Gaia OS. Gaia does support tacacs+, so that would be my prefered choice as for right now. I wanted to know if the New Services under Interface Configuration -  TACACS+ would work with this...

We are in the process of connection our networks to an outside vendor.  We are installing a 3925 ISR at their location and a matching 3925 ISR at ours and configiring a DMVPN connection between them.  Other than putting ACL's on the router at the ven...

Device: 3841IOS: 15.1(4)M2 ADVSecurityCommands: AAA AuthorizationProblem: Commands take approximately 8 seconds to process when required to authorize with ACS. Example: The show run command will take 8 seconds to process then output is displayed.Symp...

Hi,I am trying to create a Certificate signing request for the Cisoe ISE, however it seems to keep prompting with an error "Failed  to write to file". Looking at the logs file it gives the following errors for both CSR and self sign certificate creat...

Hi AllI am trying to find out if it is possible to group lock VPN users so only permitting access to certain users, I have found this to be true for AD as per below but I am wanting to do this with Novell."to allow users in “VPN Users” group in AD to...

Dear Experts,Is it possible to deploy NAC without having DHCP server in the network? We have some 300-400 users in the campus and want to enable NAC for them. As per my understanding Cisco NAC cannot be deployed without DHCP server in the network, ho...

                I am in the process of upgrading the ACS from 4.1.1. to 5.3, I have Catalyst 3750s with various levels of IOS and with ACS 4.1.1 there were no problemsAAA config on switches as belowaaa new-modelaaa authentication login default group ...

We have a problem were replication from the primary ACS to the secondary ACS is failing. Yesterday morning, a scheduled replication worked just fine, but last night I attempted a manual "replicate now" and recieved the following error "Error (-16) t...

Hi,Could ay one plz help me in installing the Cisco NAC agent through the Active Directory Group Policy. (Windows 2008 R2)Currently Cisco NAC CAS servers has been installed, configured and the switches are added. But the ports are not active. Current...

Hello everyone,I was wondering if there's a way to change the way ISE logs authentications in terms of timezone. I found that it is UTC even if I changed the timezone to my local timezone (PST8PDT).