Network Access Control

I'm running ACS 5.2 and I want to setup this up for Machine Authentication against Microsoft's AD Server.  I'm finding guides for ACS 3.1 but 5.2 is completely different than 3.1   Could someone please tell me where I can find this guide so I can set...

Hi All,i have previous ACS 4.2 with local username and Radius Token Server as the password. Scenario:- when user ssh to network devices, username will check by ACS locally follow by Token password in order to login successful.However, in ACS 5.2 i ha...

Hi,is it possible to set the dot1x guest-vlan on a Catalyst Switch via ACS 5.2 dynamicly.I want to make MAB with known Devices (FAT-Clients, Notebooks,  Desktops, Printers) and unknown Devices.I will set the VLAN dynamicly with dot1x per ACS. For kno...

Hi,I have some queries regarding on the report generation for on Cisco ACS v5.2 that I needed some advice.1) Can we schedule to run a customized report on ACS and then email the report to the user?2) Can we run a users authentication trend report bas...

We are planning to deploy NAC to inspect our remote access vpn users.Can we use NAC with open VPN or does it need to be a cisco VPN device ( ASA, PIX or VPN concentrator ).

Hi Guys,NEED HELP HERE PLEASE...any one can tell me how to dely the NAC Agent posture assessment or shifting from UnAuthenticated vlan to Authenticated (tihis time betweent) vlan for 1 minut or more.Because when system boots, the first time it gets u...

Dear Team Membersi have a very basic requirement,I have ACS ( running on VMWare) 5.1 . it is integrated with 2 AD Servers ( one in 2K3 domains and another in 2K8) domains, at present ACS is functional for 1: Wired NAC 2: Wireless NAC3: Radius / Tacac...

AllCurrently running 4 ACS 5.1 servers to load balance our 802.1x requests, but am getting an error message which is a bit unhelpful in terms of details.The error message is11051 RADIUS packet contains invalid state attributeand only seems to occur ...

I'm trying to upload the 5-2-0-26-4.tar.gpg patch to our ACS and so far have been unsucessfull. I keep getting the "please verify the patch bundle is valid".When I download the 5-2-0-26-4.tar.gpg file, for some reason the download always comes down f...

Hi,I am fairly new to the 802.1x realm, I have read several documents on how the setup is accomplished and I was hoping someone could validate the setup I have in mind to make sure I am on the right page.  Any comments or assistance would be greatly ...

We have ACS 5.1, and configured an SNMP string.When we try to poll it via SNMP it doesn't respond.  Polling PC is on the same subnet, pulled a wireshark trace and we see the SNMP request hit the ACS, but it never responds.I'm thinking we missed someh...

Hi all,another question, we have a Cisco Secure ACS appliance here, and  would like to change its ip address, based on Cisco doc,  this can be done thru the console, but we’re unable to login thru console, Below is the appliance info. any input would...

Hi all,I'm trying to configure Tacacs on Cisco ASR1001, and the Tacacs server is Cisco ACS v3.3, the ACS won't pass the authentication, complaining bad request from NAS, key mismatch - which I compared millions of times on both ASR and ACS sides. bel...

We have two single domain forests with a forest trust between them in our Windows Server infrasturcture.Currently we have Cisco ACS 5.1.0.44 and use RADIUS for VPN, and TACACS+ for Switch/Router authentication.Some users from DomainB cannot authentic...