Network Access Control

Dear,Is it possible to get the vlan id of a port of a switch so it can be used in ACS 5.2 policy ?When configuring dot1x, we would like to check which vlan is configured on the switch.Many thanks,Lieven StubbeBelgian railways

Hi All, we are using NAC 4.1 version. I need to get new cert from provider, so need to export CSR again. I've exported CSR and submitted to provider, but they said the CSR  is 2048 bits and needs to be 1024. I don't see any option in CAS GUI page to ...

Hi all,I'm having problems getting EAP-TLS to work when a client machine needs to connect to a WLAN (before logon)I can make the user get a cert from my CA, login as local & connect to WLAN through EAP-TLS without any problem.With admin account I can...

Dear,I will apreciate , if someane has a good guide for 802.1X with ACS 5.2 with Active Directory.THANKS,I

Hi all,i've problem, switch "authorization failed" on every command that i type.Switch#sho runCommand authorization failed.Switch#conf tCommand authorization failed.i only use basic configuration. *attached belowSwitch config :aaa new-model!aaa authe...

Hi all,I have 3 ACS servers placed throughout N. America. I it set up so that ACS01 is primary and ACS02 and ACS03 are secondary. When i look at the logs for passed/failed authentications in radius or tacacs I cannot see anything from ACS03 logging. ...

Hy everyoneI have a problem with my ACS SE 4.2 Database replication.I am going to explainI have two Acs SE where the primary ACS should replicate the DB on the secondary.If i try to force replication everything works properly, but if the same activit...

We are still running ACS 4.1 on Window 2003 server.  We recently upgraded AD to 2008 although the domain and forest functional level are still 2003.  After AD upgrade we now unable to authenticate via ACS Windows Database.Is this an incompatibility i...

We force users connected with PSK to land on Agreement page with click OK to continue option. Nomadix appliance is used for the agreement page.  How can we do this using ISE?The communication with ISE and WLC looks like is through Radius(old NAC was ...

I've setup a group on tacacs server called acsrestricted and mapped it to AD security group. I've set this group to privilege level 7 on tacacs server.I need this group to view the "show run" config on a router. Privilege level 7 allows the user to u...

HiHas any budy seen somthing similar on an ACS v5.2-Patch6 after upgrading to Patch6?TEST/admin# ssh delete host server01.domain.local6 [5543]: utils: vsh_root_stubs.c[569] [admin]: validate_ip_address_or_hostname - identified a valid ip address or h...