Network Access Control

Hi,I have a requirement to fall back to local accounts when ACS is down. These accounts will have specific privilege levels. I have two local users - adminro and adminrw. adminro is read only and will have a privilege level of 7.adminrw is a full acc...

HiI'm strugling with TACACS+ and priv levels, and hoping someone out there can help me solve an issue.So, in this enviroment we need the following:Read-only usersUsers with access to some configuration commands.Okay, the TACACS configuration for the ...

Hi,The ADclient service restarted automtically causing disruption in authentication.Upgraded the patch to 5.2.4 but after 4 days the service restarted again.Model: ACS SE 1120Version: 5.2.0.26.4Kindly suggest to avoid the service restart.

Hi,     Has anyone out there managed to configure a BBlue Coat ProxySG device to authenticate with a ACS server using Radius? I am currently running v4.1 ACS and the Blue Coat device is a ProxySG Model 210.(running SGOS 6.1)I have configured the Blue...

HiJust looking if anyone know how to delete the accounting/authorization Reports or logs ?Screenshot has attached herewith for reference.Thanks.RegardsSantosh

All,Very basic failure here I've replicated on both VMWare and 1120 hardware appliance.1. Run a full install (fresh reimage), allow the system to start fully.  Ensure DNS is ok and the server can ping the gateway etc.2. Patch straight to 5.2.0.26.3 v...

Hi, anyone know the OID or MIB name for Active TACACS and Radius authentication? like to use some NMS tool to pull out this information for monitoring.

Hi Experts ,Can anyone please tell me the procedure how to  upgrade fromACS 4.0 to 4.2.1  with data restoring .Please guide me with the upgrade path and the step by step procedure .Currently i am running with 4.0 i need to upgrade to 4.2.1 windows.Th...

Hello folks,We are trying to make a restore from the backup done on ACS version 5.1 to a new appliance running ACS5.2Before doing it I found this note in Cisco ACS user guide:Note: You cannot back up data from an earlier version of ACS and restore it...

Dear All,As Cisco ACS/ ISE is capable of Machine Authentication such as checking if the machine is joined to domain through certificate, is it possible by using dot1x restrict user to logon to windows domain instead of logging locally on the windows ...

We have c3750s running NAC 4.8.  Occassionally, a workstation will flap between the untrusted and trusted vlans.  We updated the NIC drivers on the workstation, we verified SNMP was functioning correctly on the switch, and we allowed the phones to ac...

Hi,I've configured Uauth access with downloadable ACL on a ASA running 8.1 and I'd like to log  the traffic hitting that ACL.By default, the traffic is logged by the ACL applied on the interface.I've tried to add the "log" keyword on the ACL defined ...

Experts,Network with almost 50-60 cisco devices (router/switches/fw). All the gear currently using local user authentication. Wondering what is the minimum required s/w to manage the gear thru ACS (TACACS) considering we have the server (primary/back...

We currently are using a self-signed cert (for PEAP machine authentication) that was created on an ACS 3.3 appliance. That cert was manually installed on our laptops when they were configured for wireless conenctivity.My problem is, that self-signed...