Network Access Control

I'm tring to find the best way to format the rules for our needs. We have users authing over wireless and the controllers are passing radius over to the acs. Currently we identify to ad, ldap, and cisco guest server. If the user name matchs in one of...

Greetings,  I've been having some trouble with the ACS x AD Identity Store, since the ACS randomly disconnects from the AD domain and I have to manually 'Test Connection' to get it working again.  Because of that, I was wondering if there is any way ...

Hi,got a new challange - we like to change the CA for our routers - using this routers for s2s ipsec tunnels, in the paste we did this by changing to preshare key authentication - but this is a lot of chonfiguration changes - did someone know a bette...

We are facing a issue when implementing LDAP authetication authorization for our remote access VPN for different Groups in Active Directory. For example: we have 3 different groups in AD like ITstaff, accounting, admin and if we want to connect for I...

Hi guys,I am testing a scenario in acs 5.3 with asa 8.4.3.I have 3 set of users.Group1 - admins with full cmd accessGroup2 - admins with limited cmd accessGroup3 - remote access vpn users accessDevice Admins will connect via tacacs & I want to do aut...

Hi!We're authenticating our Desktops and IP-Phones via 802.1x using two Radius-servers running Cisco ACS v4.2 on Win2k8. From time to time we run into the problem, that one of the servers 'get's too busy' and stops answering authentication requests. ...

We saw a warning message in our ACS:Cause:active sessions are over limit Details: session is over 250000While other discussion threads say that this is a bug (which has been closed), we investigated and found that an account associated with CSM Cisco...

Hi,I'm having problem with ISE not finding the username in a AD group, in the Authorization Policy.This applies to a computer as well, other rule and Domain ComputersThe last setup is simple: if X_AD:ExternalGroups EQUALS x.company.se/Users/Domain Us...

Hi I have to configure Cisco ACS for Active/Passive role. I am looking for some documentation on that on cisco website but can not find it.Can anyone suggest me proper best practice documentation ?Thank you,Nilay

We have wireless clients with mistyped user/pass lock out Windows AD accounts pretty often. Is there a way to provide Read-Only access to the Monitoring and Reports viewer?I would assume this would be done via Roles, but I cannot see a way to create ...

Hi all,Here is my another question after the command set. How to seperate the AD users for different authorization instead of using AD group? i currently do now is using AD group to control a few users for the authorization on the switch. However, cu...

Greetings,   I have a simple ASA, ACS, AD schema for RA VPN authentication. All is working for a few months now, but since the initial deployment we have this connectivty issue regarding ACS and MS AD. At random intervals, 1 month/1 week, the ACS con...