Network Access Control

Hi AllI need to get the nms 9000  to work with the new ACS 5.3.Looking at the existing ACS 4.0 we have the following attribute set -cisco-av-pair=shell:roles*"network-admin"and looking at the below i think we need to have this set somewherein order f...

Hi all,We're having trouble trying to deploy 802.1x authentication on a brand new site.Our primary and secondary ACS are located in Paris and the new site located in Toulouse, France.Both sites are connected through the WAN.Everytime a computer/user ...

Hi there,is there a matrix that compares the NPS vs. ACS to see the advantages or disadvantages of the products.e.g. I see that I can access only one domain, we have the problem that we have some domains we need to ask for access groups. They have a ...

I'm a little confused about the configuration of max user sessions for device administration with TACACS.When I've changed the configutration of unlimited sessions for a value in Access Policies > Max User Session Policy > Max Session User Settings I...

We are currently using ACS 4.2, for Wireless authenication we authenticate with Current User and Local Computer Certificates. How do we remove authentication part for current user so it just uses the Local computer certificate for authentication. We ...

I am trying to secure changes to switches using ACS 5.3 and allowing our technicians to only change the vlan for user ports on the switches.  How can I use regular expressions to filter out the 1/1/# ports so that those ports cannot be accessed in co...

Hello Everyone,Can a single ACS appliance be integrated with a diff OU in the AD (maybe with a diff IP address range). If yes, how?Thanks,Rishi

I am having difficulty with AAA setup on my recently upgraded ASA 5520.  I upgraded from 8.3(1) to 8.4(4) and my AAA no longer works.  If I use Kerberos I receive time skew errors (works fine on my remaining 8.3(1) ASAs) and when I setup LDAP I get "...

helloi'm running into some problems with ACS 5 and the External Proxy Access Service policy. The issue is the same as outlined here: https://supportforums.cisco.com/thread/2075329 i've also tried this with ACS 5.2 and 5.3. when i use the External Pro...

Hello guys,I need help for deploying Cisco NAC on remote branch. i did all the necesary steps & configs but still no luck, On main site we have OOB-Real IP Gateway deployment. all the campus is deployed but for remote branch it is not working, we hav...