Network Access Control

AllCurrently running 4 ACS 5.1 servers to load balance our 802.1x requests, but am getting an error message which is a bit unhelpful in terms of details.The error message is11051 RADIUS packet contains invalid state attributeand only seems to occur ...

I'm trying to upload the 5-2-0-26-4.tar.gpg patch to our ACS and so far have been unsucessfull. I keep getting the "please verify the patch bundle is valid".When I download the 5-2-0-26-4.tar.gpg file, for some reason the download always comes down f...

Hi,I am fairly new to the 802.1x realm, I have read several documents on how the setup is accomplished and I was hoping someone could validate the setup I have in mind to make sure I am on the right page.  Any comments or assistance would be greatly ...

We have ACS 5.1, and configured an SNMP string.When we try to poll it via SNMP it doesn't respond.  Polling PC is on the same subnet, pulled a wireshark trace and we see the SNMP request hit the ACS, but it never responds.I'm thinking we missed someh...

Hi all,another question, we have a Cisco Secure ACS appliance here, and  would like to change its ip address, based on Cisco doc,  this can be done thru the console, but we’re unable to login thru console, Below is the appliance info. any input would...

Hi all,I'm trying to configure Tacacs on Cisco ASR1001, and the Tacacs server is Cisco ACS v3.3, the ACS won't pass the authentication, complaining bad request from NAS, key mismatch - which I compared millions of times on both ASR and ACS sides. bel...

We have two single domain forests with a forest trust between them in our Windows Server infrasturcture.Currently we have Cisco ACS 5.1.0.44 and use RADIUS for VPN, and TACACS+ for Switch/Router authentication.Some users from DomainB cannot authentic...

Hi Guys,i have a strange behaviour under my NAC Server.Today I saw that my NAC Server is in Fallback: Allow All state and the CAM is in Manager: DEAD butin the CAM web administration i can access that CAS.The CAS can ping the CAM too.there are two th...

Hi,I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4.When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows...

I want to know is the trustsec need the setup of ACS 5, can it be trust with other switch by setting the same password to do the encrytion

Hello,On an ASA5520 v7.2 I can only seem to authenticate to the console when using telnet and not ssh. I can connect using both methods, but just have trouble authenticating with ssh. Here are relevent lines related to the issue:username user1 passwo...

If any one of you are interested in setting up opensource tacacs along with RANCID on Unix(ubuntu)i have a small blog on the same with step by step instructionshttp://bejoybkn.blogspot.com/Hope it will be helpfulBejoy

Hi All,we are implementing ACS 4.2. our customer asked us if it's possible that ACS sends email notification if certain commands applied to the router or switch. if it's not possible, what is the best solution to send email notification for certain c...

Looking for the steps to configure wired clients using certificate authentication only - ie, once a certificate is presented to the ACS that is issued by a trusted CA, the connection is permitted.No need to tell me about switch configuration. This is...