Network Access Control

Hello,About a year ago we were doing an evaluation of ACS 5.0 in VMWare and decided to purchase it.  I applied the license to our eval build and continued some lab testing with it.  Some other projects came up and ACS was never put into production, i...

Hi,I configured a VPN network with VPN client access and all work fine. I have administrative rights on the ASA, so I can add, remove VPN users as I want. I have no AAA server in place. Only SSH or ASDM is used to define users.Now, I want to deploy s...

Hi guys,I'm a CCNP level engineer and I'd like to learn about NAC. My company tried to send me on a training course but they never had enough students to start one. I was looking for some books but all I've found was back from 2007 which is too old I...

As the topic say, is it possible.I imagine I can use the framed-ip-address attribute to assign ip-addresses but there seem to be support for static ip addresses only?A bit of a drag when we're talking 200+ nodes.Thanks.

Hi,How do we disable the telnet to ACS appliance 4.2 1113 SERegardsAmar

Does anyone know the config on standard 3750/3560 IOS switches to have two radius-servers configured but only send to one server if the other fails. The switch is load balancing, but I want the backup to only be used if the primary is listed as dead.

Hi,I am looking to introduce SSO into a NAC Deployment for remote access and wanted to check if this situation would work.  Ok, basic setup is Cisco IPSEC VPN with NAC inband after the ASA where the VPN is terminated.  NAC is running 4.1.3(to be upgr...

Hi GuysI have the following problem. In the ACS primary have an error: ACS `Secondary` has denied replication request. And the secondary have the message:  Inbound database replication from ACS ´Primary´ denied - shared secret mismatch.They are worki...

Hello all,Need a CISCO ACS developper to customize the login page.Please contact me, very urgent job.Or if anyone can point me to the right API or template to use.Regards,Marc

Greetings all!  I'd like to ask you guys, if you ever had to configure a deploy in the way my client wants.  We're using Cisco Secure ACS 5.2 as a Proxy AAA server, using Active Directory as an External Identity Store. They are already synced and con...

I need to configure RADIUS VSA configuration for a my alvarion device. Following are the attributes that need to be configured.- Packet Data Flow ID (ID 1, integer16)- Direction (ID 4, integer8)- Transport Type (ID 6, integer8)- UplinkQoSID (ID 7, in...

Hello,I am facing an issue with several ACS appliances (some other work well) when upgrading to version 5.2.0.26.8.When I launch the command acs patch install, I receive the following error message (we use FTP):Failed to copy file '5-2-0-26-8.tar.gpg...

hi,I am trying to fine tune the existing Network Device groups in my ACS server and want segregate the list into something like - Switches , Firewall , Routers.All my network devices currently are into default -"Not Assigned group " close to 500 devi...

connect to vpn the authentication go on radius server.(AAA radius server) .We need to see on radius server   which ip address the vpn user get from dhcp pool from ASA.how we do this configuration at ASA and radius server.