Network Access Control

We currently are using a self-signed cert (for PEAP machine authentication) that was created on an ACS 3.3 appliance. That cert was manually installed on our laptops when they were configured for wireless conenctivity.My problem is, that self-signed...

In CLI we have users log in at priv 1 and use "enable" to increase privilege and do configurations. This allows "accounting" of command history.On the AIR-AP1121G-A-K9 (12.3(8)JED1) I cannot duplicate this for http login.I can log in as a user at pri...

Hello Guys, Could anyone help me?https://supportforums.cisco.com/message/3049535#3049535I am trying to configure a Dynamic ACL for VPN users following the steps of "jrabinow" manual (check the link attached), but it doesn't work and i dont know why?....

Hi, there,I am working on a NAC Guest project where I need to do web-auth for wired-guest users.I read through the doc "IBNS: Cisco Integrated Local Web Authentication Deployment and Configuration Guide" and able to  get NGS working with ACS via inte...

I have two ACS servers I'm trying to install cumulative patch 3 onto.  One of them worked like a champ.  The other one keeps giving me the following error:hostname# acs patch install 5-2-0-26-3.tar.gpg repository CINMONITOR2Failed to copy file '5-2-0...

We have 3x Cisco ACS servers that we are using for centralised authentication for our switches, routers, etc..  the authentication works when the first server is available, but the devices are not querying the other 2 if the primary is unavailableaaa...

Greetings,How can we migrate from Juniper Steelbelted Radius to Cisco ACS 5.2 without loss of data and losing time?What are the steps or is there a migration toolkit that can help us?Thank you,Regards,

Hi allcan anyone explain to me in simple terms how devices encrypt and decrypt data when using pki, where does the private key come in to it? and what gets exchnagedcheers

Hi,We have configured an 2801 to aggregate some VPN clients. The problem is that between 20 and 50 minutes it asks for re-authentication even though the connection is not idle. Is there a timer that creates this problem?Below the applied configuratio...

Hi there,I am trying to configure 802.1x for a port with an Alcatel VoIP handset and PC connected, the VoIP device is connected to the LAN and the PC connected via the VoIP handset.  The switch is a 3750 running 12.2(50) IOS and i am using ACS 4.0(1)...

Hi All,We have configured ACS 5.1 for autenticating wireless users with active directory, which is working fine now.But we would like implement that single user should be authenticated through ACS . If any user try to access WLAN from multi system wi...

Hi, Im currently working on LDAP configuration on ACS for integrating with AD (window 2003) by TACACS+.but im really confuse with common LDAP configuration. After configured, Im not able to map into the database, 'LDAP NOT REACHABLE' - keep getting t...

Running ACS 5.1 appliance, and am seeing slow repsonse on TACACS authentications due to the ACS trying to reach overseas AD servers and failing.  Is there any way to configure a /etc/host/ file locally on the ACS in order to force the appliance to us...