Network Access Control

We setup certain users to use a particular password authentication, i.e. local or Entrust.  This is used for local ACS accounts to log into switches with their Entrust/VPN credentials instead of using a local user DB.  Is there a way to set this?

Hi all,I have an identical ACS 5.1 pair connected in active/backup mode. Is it by design that only the primary ACS IP address should be "pingable" from remote subnets but the secondary ACS only from the local subnet, or is there a configuration setti...

Once I used a router (3660)for dail-in with ACS and RSA,then  I am going to take the 2611 over 3660,and the configure are basicly the same. But I can not dail-in with token,and on the ACS I found this message:cached token rejected/expired.However if ...

Hello frineds,Could anyon hep me in getting Certificate revocation list configuration in ACS.I have 3 CA certificates attached in ACS. 1 is root & 2 other are intermediate certificate.Now I should configure revocation URL's & configuration in which C...

I've been trying to find the right information on Cisco's site, and I'm not having success.We have a 3900 router that we would like to do authentication via a local userdatabase.  We want ssh access and console access using a local user on the router...

Our 6509 switch is not sending mac-notification traps to the NAC manager.The linkup linkdown traps are working however the traps specific to mac-notification are not.SNMP counters are not incrementing and a show mac address-table notification change ...

HiI have a c3750-advipservicesk9-mz.122-46.SE.bin which I think I can use 802.1X and want to restrict1. only company PCs on this switch2. Polycom Video units like 9000HDX3. Cisco IP Phones PCCan I do this with 802.1x or is there something else. Sampl...

Dear All,Actually i have configured my Cisco ACS and integarated with Fortigate Firewall on RADIUS for authentication of VPN users. its working fine and user authentication is working but the problem is that i want too know when user logged in and lo...

Hi there,I am currently playing around with the updated ISE 1.1 and tried out the new NMAP probe feature.Is there any possibility to alter or expand the features of the NMAP implementation in the ISE, like additional scripts etc.My main concern is to...

My customer has a large installed base of MACs, all connected via controller-based (5508) WLAN. He wants to grant access to the network based on the device's mac addresses and move the WLAN-clients to a specific VLAN.I added all devices with their ma...

Dear all,I've deployed wireless OOB NAC. Some user can login normally, but some other user can not login. The error message is OOB Error: connected device <client_MAC> not found. This only happen at some PC user.Does anybody have any idea?Thanks

Hi, I'm somewhat new to ACS and am trying to complete a migration from 4 to 5.3 Currently, I've got ACS joined to my (2003) domain, and it shows status connected (although the test connect fails). I have aaa working without issue for TACACS, but all ...

hello i have a question.. i am building a test network en i want to be able to control the users and with control i mean i want to be able to make sure that the can't delete the flash:or the flash:vlan.dat is there a way to to this with a windows 200...

Hi,I have a running L2TP/IPsec VPN setup with authentification against a radius server (freeradius2 witch mysql). I would like to have some of my VPN users get a fixed IP address instead of the dynamically assigned IP Pool.The radius server is return...