Network Access Control

Hi,We activated dot1x authentication on a WS-C3560-24PS port (IOS 12.2(25) -several subversions) for the authentication of an IpTel. After the successful authentication we see in the ACS logs (and with a dot1x debug) that this client is reauthenticat...

HiI'm now in the tesing stages of our new Cisco ACS Appliance. I'm running version 5.2.0.26.6.I have created some authorization policies to either allow admin access or read only access. This is based on what AD group you are in and also a device fil...

hi thereWe just use ACS 5.2 to replace our old ACS 4.2, but the CPU load of new ACS server offen has high CPU load, we olnly has 12X AAA clients, does anyone has any idear about that?Version 5.2.0.26 Platform:VMware ESX3.5vCPU 2HD 520GRAM 4GB

I seem to be having issues trying to use the same Policy on an internal group and a group within AD. Under the Default Device Admin-Identity - Setup a Tacacs rule for a group within AD (rule 1) and duplicated the rule for an internal group (rule 2). ...

Hi,I'm sizing a NAC project with 600 loal users, but I can use 2 NAS3315 and split the users number in both equipments, handle 300 in the first NAS 3315 equipment and 300 in the second NAS 3315, it's possible?

Hi Community, Cisco Guys!I have a Catalyst 3560G PoE-48 here and wonder whyauthentification {fail, no response} options are being ignored.Port config:interface GigabitEthernet0/43 switchport mode access authentication event fail action authorize vlan...

Hi Experts,we have single ip address with /32 configured in AAA client list. After AAA configuration in switches , we are getting message as a “ Tacac server is not available please try login with local account “ . ACS logs : ---- A TACACS+ packet w...

HiI got a health alarm on my ACS 5.2 due to disk usage for /opt is 100%. This is a single server (primary) system.Suggestions on how to cure?Regards, Atle Inge

I have a admin who nested a Network device group inside another network device group. Is that reccomended? For instance, there is a NDG for Asia, and inside asia he put other NDG for Routers, another for switches, and yet another for firewalls. This ...

Hi all!I´ve been practicing for CCNA Security. I´ve configured aaa authentication and authorization locally with radius server and local respectively. I´m also managing Role-based CLI views. The problem is when i issue the show running-config command...

Hello,I want to set up the ACS 5.1 for dot1x-Port authentication. I want to make a machine authentication against an AD-Domain and I got the following error Message:24435  Machine Groups retrieval from Active Directory succeeded24100  Some of the exp...