Network Access Control

Hi,I am getting aaa/authen status = error  messages when I am debugging the aaa authentication.tacacs is verymuch reachable with no request timeout. sometimes its authenticating with TACACS.  Many times its authenticating with local.enable password i...

Hi, Heres my situation.We have switches, routers and ASAs in our network, and 2 x ACS 5.2 over two locations.All devices authenticate using AD via ACS failing to our remote ACS should there be a failure, this works fine on all types of management con...

I am receiving a RADIUS authentication failure stating user must change password; however, password has been changed in AD and is not requiring change password any longer on the AD side.Is there a cache on the ACS that needs to be cleared?AD connecti...

All, We have a scenario where guests will be authenticated against the ISE or NAC Guest server, and customer will place an IronPort to provide web security, however, we can not find referentes whether IronPort can or cannot integrate with Guest Serve...

Hi AllAs previous posters may have noticed i have been given the task of moving the ACSfrom 4.0 to 5.3 which turns out to be considerably different.Sadly i have nothing to test with at the moment so am trying to work it out as best i canbefore the ab...

Ok, I have been fighting this for two days now.  I want to use the webauth function on some of our Cisco 3750Gs ver 12.2(55)SE5 for guest access.  I'm trying to use our NAC Guest Server ver: 2.0.3 as the backend portal and Radius server.  We do not h...

I have the following AAA authentication config:aaa authentication login default group tacacs+ localCurrently, local authentication doesn't seem to work.  If the tacacs server is unavailable, will local authentication work, or fail?  I'm thinking it w...

hi ,we have installed nac for our customer and it works fine ,but the customer want the change the version of kaspersky antivirus from 6 to 8 end point security ,when we have try this the nac agent does not find the antivrus on the the workstation .i...

Dear All ;I have RSA Securid appliance 3.0 "A120"  V 7.1 Sp4  and Cisco Secure Access Control System (ACS) Appliance V4.1.1 (build 23)..I make  communication between the Cisco Secure ACS and the RSA Securid appliance using RADIUS Protocol .I only con...

Hy,I have a network with several layer 2 (c2960) attached to a layer 3 switch (c3750). All these switches are behind a firewall (ASA 5510) and the firewall is connected to a router c3810.I have an ACS v.4.x to use as a Tacacs server.In all the equipm...

Hi all,I have strang situation, when you try to authenticate with the local username and password, switch keeps bouncing back for user name and passwordthough I have given the correct information*****************************************************aa...

Friends, I got a problem.We run ACS 5-2-0-26-10. Some clients gets the error message "5411 EAP Session Timeout", and the clients are assigned guest LAN. If I reboot and log in again, still the same. However, if I reboot and log in with another user, ...

Hi,I am trying to install ACS 5.0 on workstation, however once the install finsihes it reboots and I enter the Linux bash command line rather than the Cisco CLI.Can anyone help?Thanks,AshNote - this is now fixed. I followed the steps here to install ...