Network Access Control

Hi,Here is the scenario:Domain A (Forest 1) <--Two Way Trust--> Domain B (Forest 2)ACS is joined to domain A.My question is AD integration (Not LDAP) supported between 2 domains in different forests?ThanksFrank

Hey!I'm trying to configure ASA 5550 t8.4 so, that ssh and https access users would auth themselves vs Radius (or LDAP) server and they would be directly logged in with privilege mode 15.I have:Windows 2008 NTP acting as RADIUS server.And the network...

anyone having this issue?  ACE is configured to point accounting to ACS servers but ACS servers are not seeing all the accounting logs.  I can only see accounting logs from ACE for watchdog, start and stop.

Hi all,Here is the situation...I have 3 ACS 5.2 servers both here and in the US. On friday night, our building lost power and it came back up early saturday morning. During this, the Wireless controllers dropped their configs and reverted back to poi...

who does know how to configurea user profile for ACS to authorize a user for ASA cuit through Proxy ? Radius is simple, but TACACS+ is very uncommon and not outlined in any document or configuration example.

In order to authorize command on ASA8.x for different users, I have to put 'aaa authentication enable console TACACS' into ASA configuration, and in ACS - user setup - TACACS+ enable password - Use separate password, I set an enable password. It work...

Hi,I have the following message in the events logs of the NAC:SWISS detected second access VLAN IP:10.175.201.50 for [00:13:55:C7:61:89 ## 10.175.236.26/10.175.236.26] from CAS [10.3.2.13]. Removed user from CAM.This issue happens on several workstat...

Hi everybodyFor CCNA security i was testing a lab made of two routers connected by a serial ppp interface and able to reach a Cisco ACS 5.2 AAA Server through a Fast Ethernet 0/0 both.Now my problem is that using RADIUS i am able to authenticate the ...

Hi,I am configuring NAC manager and two nac servers in my company. The CAM and one of the CAS is located in our head office. The second CAS is located in our branch office. The second CAS (remote to CAM) will control only the local users in remote of...

Hi,I've a ready and wroking setup for Cisco NAC and i need to upgrade it to the new ISE, other than dot1x changes n the switches configurations, what else will need to be configureddoes the upgrade makes it a fresh installation?

Dears,I have a question about upgrade NAC Module, I follow standalone procedure to do the upgrade but I wonder about the upgrade file should I use because on the Cisco site I didn't find the upgrade file from 4.8.0 to 4.8.2.what I found is nme-nac-up...

Hi thereI have a dot1x client with client certificate working well with my ACS 5.2 and EAP-TLS. Now I would like to configure the Re-Auth periode on the ACS 5.2, I did the following:1. Configure a Access Profile with Reauthentication Timer = static a...