Network Access Control

I am wondering is it possible to accomplish following scenario.I want to authenticate users connecting to my network using 802.1x based on Active Directory, but to be able to put users from external database (AD) to different Vlans based on some spec...

Looking to fine tune Cisco IPSec client RA-VPN authentication on our ASA-5510. Currently using NT Domain authentication. It's been working fine for quite a while but is too broad a brush. It authenticates anyone who is in the domain. We need to o...

I want to apply an authorization profile depending of the login username used, like assign the VLAN ID, so on a lab I created 2 rules, each of them using the System:Username field and then apply the Authorization profile with the correct VLAN to the ...

I have ACS 1131 with 5.2 version software.Can this be configured as a VLAN Membership Policy Server for dynamic vlan assignment in the switches.If possible, Can anybody provide me the configuration steps or ideas.Thanks & Regards,Lenin S9620745656

I am configuring ACS 5.I have group in AD created. There is 2 users in the group. Usera are from different OUs.One user get authenticated.The other failing to get trough authentication with following error:24463 Internal error in the ACS Active Direc...

Hi All,Is there a way that the IP address of the client workstation connecting via SSH to a cisco can be captured and sent in the RADIUS Access-Request packet?Thanks,Phani

Hi I've noticed a strange problem I think it's quite recent but cannot highlight what may have caused it.I am unable to login to the console port on all devices that ive currently check on my network. I can SSH no problems.I hit return when asked and...

Hello together,i have a wireless deplyoment with WLC 5508, ACS 5.2 and several AD connected by LDAP. It is required that users are authenticated by certificates additional the user should only get access to the wireless environment when the user is f...

How does the NAP server check for policy compliance if the device requesting network access doesn't have an IP yet? I understand that the NAP server can authentic the user through the switch via dot1x (layer 2) but, what about policy compliance?Thank...

Hi friends,I have a question about my ACS redundancy deployment. I bought three ACS all of them came with base license. but i bought large deployment license my question is necesary to buy the large deployment license to add two seconday ACS to my Pr...

hi! is there anyway that i can authenticate user login thru Microsoft AD/IAS to the cisco switch/router without using Cisco ACS or any paid solution? Thx

Hi all, quick question about ISE:How can ISE prevent people from connecting to the network using personal devices, ensuring that only corporate devices can access the network and get a valid IP address?Thanks!

Hi NetproI have router locked (telnet and console) due to aaa-new model configuration , how to unlock this router , i nned to access it through the networkN:B,I have on the router local user name in the DatabaseThanks