Network Access Control

                   Hi all,On Cisco 1900 i see this on logMay 15 15:28:28.855 MDT: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication server type tacacs+ (UNKNOWN)May 15 16:16:50.695 MDT: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication ...

I have an acs 5.0 running on Cisco 1120 appliance. It has worked for 2 years.Suddenly, I discovered that user can no longer login with their credentials.On close examination, when I console, the booting does not complete. Screen shot attached.Please ...

This error shows up when attempting posture assessment on one of our patched Windows 7 computers, using Kaspersky Anti-Virus 6.0.4.1424 for Windows Workstations. It persists even if the Kaspersky Firewall is disabled and Windows Firewall is used in i...

Question on this, is 5.2 backwards compatible with 4.2 appliance? If not, what is needed to bring the 4.2 appliance up to 5.2 and will the VMWare version work for the second system with the appliance as primary?  Years ago I had 2 of them and replica...

HiI am quite familar with ACS and have granted access to resources through configuring Group Mappings to our AD including WCS acces and access to network switches.However I want to grant access to staff to be able to create local accounts on ACS to a...

Hi,I am in the process of testing ISE. I have run into an issue when a user needs to reauthenticate the below popup that request aditional information happens to fast that you sometimes do not even notice it or able to click it in time to retype your...

Hi Sir,I have some doubts about the attribute in ACS: cisco-av-pair. I setup some ACLs in this attribute and hope this attribute can be sent from ACS to my PIX/ASA for future filtering usage if an user passes the first authentication attempt. I found...

I have a cisco nexus 7000 switch and a cisco ACS 5.2. I would like to setup the switch to be able to authenticate users with tacacs+ using RSA secureid tokens when they try to logon to the switch. Does anyone know where I can find documentation to do...

Let's say VoIP network is going to be deployed in my organization.GIven this is a FIPS-140-2 environment, we will have a separate MPLS network from data only dedicated for VoIP traffic.If we also have NAC deployed, how is the best practice for NAC ha...

HelloI would like to know if it is possible to apply per-user (session) based Policy Based Routing in some Layer 3 equipment from Cisco.The need is to authorize specific users (already in RADIUS) and if authorized, apply PBR to their session. If the ...

Hi,I'm following this guide "IBNS: Cisco Integrated Local Web Authentication Deployment and Configuration Guide" (http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/app_note_c27-577490.html) in order to configure web authenticat...

                   Hi all,I am looking to understand the different ways that people have used Certificates so that we can distinguish between Corporate owned Windows machines and IPAds and then the BYOD IPADs and machines that are attempting to conne...

Hi,I recently upgraded my ACS v3.3 to v5.3.0.40 and am having challenges with Motorola MC55 authenticating on the ACS Version : 5.3.0.40The WLAN profile on the PDA is security Mode = WPA Enterprise  Authentication  Type = PEAP though the device has o...

Hi all,I have been reading article http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1430161 and I am trying to get my head around the type of port authentication Methods & Modes ...