Network Access Control

helloi'm running into some problems with ACS 5 and the External Proxy Access Service policy. The issue is the same as outlined here: https://supportforums.cisco.com/thread/2075329 i've also tried this with ACS 5.2 and 5.3. when i use the External Pro...

Hello guys,I need help for deploying Cisco NAC on remote branch. i did all the necesary steps & configs but still no luck, On main site we have OOB-Real IP Gateway deployment. all the campus is deployed but for remote branch it is not working, we hav...

Hi ALLCurrently trying to set up the above so that if an access service is not matchedthen it will go to the next one.Looking at the logs what happens is - our auth is set to AD so it matchesthat - then it isnt in the correct ext AD group and goes to...

Hi all,I got a Question to the context directory agent.We are using windows 2008r2 nap for 802.1x authentication on switch ports.Would it be possible to use the radius accounting for the CDA to assign the user ip mapping?Or is the radius authorisatio...

Hi,It´s possible to enable unconditional machine authentication in ACS 5.3.Best Regard,Marco Huaynater Ricaldi.

Hi, within ACS 5.3, I'd like to use 2 external authenticator for the same service, like vpn remote-access.For the authentication, I know I can create an identity chain, to query SecurID and then AD, in case of user not found in SecurID.For the author...

I'm trying get TACACS working on a Catalyst 3650 with IOS Version 15.0(1)SE2, RELEASE SOFTWARE (fc3). I believe my AAA model is defined correctly since it doesn't work properly until the switch is rebooted then I have to remove the TACACS server grou...

Support Community,We have ASA5510s protecting the company voice networks that are only currently managed via the CLI. I've gone ahead and uploaded the relevant ASDM image to the device, unfortunately I can't log on to the ASDM as we use two-factor au...