Network Access Control

We have two single domain forests with a forest trust between them in our Windows Server infrasturcture.Currently we have Cisco ACS 5.1.0.44 and use RADIUS for VPN, and TACACS+ for Switch/Router authentication.Some users from DomainB cannot authentic...

Hi Guys,i have a strange behaviour under my NAC Server.Today I saw that my NAC Server is in Fallback: Allow All state and the CAM is in Manager: DEAD butin the CAM web administration i can access that CAS.The CAS can ping the CAM too.there are two th...

Hi,I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4.When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows...

I want to know is the trustsec need the setup of ACS 5, can it be trust with other switch by setting the same password to do the encrytion

Hello,On an ASA5520 v7.2 I can only seem to authenticate to the console when using telnet and not ssh. I can connect using both methods, but just have trouble authenticating with ssh. Here are relevent lines related to the issue:username user1 passwo...

If any one of you are interested in setting up opensource tacacs along with RANCID on Unix(ubuntu)i have a small blog on the same with step by step instructionshttp://bejoybkn.blogspot.com/Hope it will be helpfulBejoy

Hi All,we are implementing ACS 4.2. our customer asked us if it's possible that ACS sends email notification if certain commands applied to the router or switch. if it's not possible, what is the best solution to send email notification for certain c...

Looking for the steps to configure wired clients using certificate authentication only - ie, once a certificate is presented to the ACS that is issued by a trusted CA, the connection is permitted.No need to tell me about switch configuration. This is...

I've inherited the adminstration of our ACS and right now it runs on Windows 2003 servers at version ACS v3.x.But I have two ACS 1120 appliances (ACS 4.x) to migrate all AAA to and the previous administrator had things close to completion but I'm con...

In order to develop precise and flexible access control policies, I want to create policy based on group membership. However, the user’s “Identity Groups” selection dialogue box only lets me select just one group per user. How can a user be a member ...

Hi,We have been hoping to deploy Cisco TrustSec for our new mobile working solution.This would basically enable to perform posture assessments and assign resources to users based on usernames, whether they be1. Wired2. Wireless3. VPN usersit now turn...

Hi my friendsI can add a ACS 5.1 to an Active Directory without using the administrator account, I have a domain administrator account by another name. I can use this account to include the ACS domain.I have a account domain admin but when i try to a...

Hello, I have a question. it is posible implement NAC Appliance SSO AD VG/Real IP - L2/L3 for OU (Organization Unit), for example; if i have OU sales and OU market in the windows domain X. it is posible restrict the police and assign diferent network...