Network Access Control

Hi,got a new challange - we like to change the CA for our routers - using this routers for s2s ipsec tunnels, in the paste we did this by changing to preshare key authentication - but this is a lot of chonfiguration changes - did someone know a bette...

We are facing a issue when implementing LDAP authetication authorization for our remote access VPN for different Groups in Active Directory. For example: we have 3 different groups in AD like ITstaff, accounting, admin and if we want to connect for I...

Hi guys,I am testing a scenario in acs 5.3 with asa 8.4.3.I have 3 set of users.Group1 - admins with full cmd accessGroup2 - admins with limited cmd accessGroup3 - remote access vpn users accessDevice Admins will connect via tacacs & I want to do aut...

Hi!We're authenticating our Desktops and IP-Phones via 802.1x using two Radius-servers running Cisco ACS v4.2 on Win2k8. From time to time we run into the problem, that one of the servers 'get's too busy' and stops answering authentication requests. ...

We saw a warning message in our ACS:Cause:active sessions are over limit Details: session is over 250000While other discussion threads say that this is a bug (which has been closed), we investigated and found that an account associated with CSM Cisco...

Hi,I'm having problem with ISE not finding the username in a AD group, in the Authorization Policy.This applies to a computer as well, other rule and Domain ComputersThe last setup is simple: if X_AD:ExternalGroups EQUALS x.company.se/Users/Domain Us...

Hi I have to configure Cisco ACS for Active/Passive role. I am looking for some documentation on that on cisco website but can not find it.Can anyone suggest me proper best practice documentation ?Thank you,Nilay

We have wireless clients with mistyped user/pass lock out Windows AD accounts pretty often. Is there a way to provide Read-Only access to the Monitoring and Reports viewer?I would assume this would be done via Roles, but I cannot see a way to create ...

Hi all,Here is my another question after the command set. How to seperate the AD users for different authorization instead of using AD group? i currently do now is using AD group to control a few users for the authorization on the switch. However, cu...

Greetings,   I have a simple ASA, ACS, AD schema for RA VPN authentication. All is working for a few months now, but since the initial deployment we have this connectivty issue regarding ACS and MS AD. At random intervals, 1 month/1 week, the ACS con...

     Is there an installation guide for ACS 5.3? I am looking for something that will guide me in the installation and base configuration for our new ACS appliance. It looks like tha latest version most of the links point to is a version 4. Figure th...

Hi all,I'm trying to log commands with my ACS 4.2 version, but the cmd section remains empty. Can someone help me to figure out why the commands are not logged?infrastructure is configured for accounting as follows:aaa accounting exec default stop-on...