Network Access Control

Group Mapping AD Groups and ACS Server Groups

Hi all, I have configured two ACS 4.2.124 Patch 17 ACS Servers on Windows 2008. The Domain is a Windows 2008 AD. I configured Group mappings for some AD Groups where some test laptops are member of the groups. We also have installed a internal Micros...

Resolved! Windows Active Directory

Can I use AAA Radius on a ASA 5505 to block outgoing user access by user name in a group? Thanks

Resolved! Using AD credential for device management.

Hi , I trying to set the identity source to use Active Directory's reside credential as the method for authentication. Connection between AD and ACS was establish and connected. Problem statement:-The moment i trying to telnet from remote site, i abl...

[Q] Identity Sequence issue causes MAB to auth against AD ??

We have a strange issue whereby some users have suddenly failed to correctly authenticate against ACS 5.1 - we cant work out why, as nothing has changed and would greatly appreciate your help.We have dot1x configured on our network with MAB fallback....

NAC Agent Setup

Hi dearsI have a problem with my NAC appliance, Can anyone help me please?I have two NAC appliances version 4.8.2, one Manager and one Server, I want to know if the “nacagentsetup-win-4.8.2.1.tar.gz” software exists in my appliance or it’s CD or not?...

ACS 4.2 and EAP-FAST w/AD

Hi everyone. I'm currently deploying two WLC 5508 controllers with about 125 3502i APs. As part of the bid, they required ACS 4.2. I've got it installed, got TACACS+ working from the switches/routers, now i'm trying to get EAP-FAST working properl...

ACS 5.3 Tacacs Authorization logs

Hi All,Anyone has noticed tacacs authorization logs when you change password for a user ?? in authorization logs I can see the new password but same I can not see in accounting logs ? is it a normal behaviour ?? or do we need to do something to hide ...

ACS Migration from 4.1.1.23 to 5.2

I need to upgrade my ACS for windows 4.1.1.23 to 5.2 as we have come across the windows 2008R2 AD problem. Now reading the migration document it says I need to go to at least 4.1.1.24 first which will not be a problem, then I need a migation server,...

Resolved! ACS 5.2 - Command set is empty "[ CmdAV= ]"

Hello,I have a problem with the ACS 5.2 configuration: I am trying to use the AAA authorization to centralize privileges and commands but only the privilege level is sent to router, the command set aren't sent.The test cenary is this:ACS 5.2Router 29...

ACS 5.2 trust Other CA

I have my ACS configured to authenticate Dot1x Users with certificates from my CA.I also need to trust users that connect to network with other certificates, from another CA, example certificates from microsoft.ACS version 4 has in default a Certific...

Resolved! aaa authorization console command

Hi,I don't really understand the need of the command "aaa authorization console".We indeed often configure these lines, which according to me already ar eapplied by default to VTY, Console, etc ...:aaa authorization exec default group tacacs+ if-auth...

Resolved! Cisco CNA: Sending empty commands

Hi all,I'd encountered the following situation – while working with Cisco's CNA (Cisco Network Assistant) on a 2960 switch, any change done by this tool is sent out as an empty set of commands, to a TACACS server to approve.Let me explain. I have 296...

Resolved! can not upgrade ACS 5.2 to 5.3

I have a brand new ACS version 5.2. Everything is working fine. I go to cisco website and download the following packages:5-2-0-26-8.tar.gpgACS_5.3.0.40.tar.gz- I then uploaded these files to my Linux CentOS server - I then go to the ACS UI and cre...

ACS upgrade to 5.2 - DB migration

Hello,We have ACS Cluster of 2 1111 SE running:Cisco Secure ACS 3.2.3.11 Appliance Management Software 3.2.3.11 Appliance Base Image 3.2.2.2 and bought 2 new ACS SE 1121 5.xThe whole thing here is to get suitable backup file to be imported to the n...

Resolved! Import Server Certificates on ACS 5.2

When I tried to import the file, there are two lines there,One is Certificate file, the other is for "Private Key File".My question for you is, is this the private key of CA? My understanding has always been that the private key stays in CA only, not...

Network Access Control

Forum Posts

Group Mapping AD Groups and ACS Server Groups

Resolved! Windows Active Directory

Resolved! Using AD credential for device management.

[Q] Identity Sequence issue causes MAB to auth against AD ??

NAC Agent Setup

ACS 4.2 and EAP-FAST w/AD

ACS 5.3 Tacacs Authorization logs

ACS Migration from 4.1.1.23 to 5.2

Resolved! ACS 5.2 - Command set is empty "[ CmdAV= ]"

ACS 5.2 trust Other CA

Resolved! aaa authorization console command

Resolved! Cisco CNA: Sending empty commands

Resolved! can not upgrade ACS 5.2 to 5.3

ACS upgrade to 5.2 - DB migration

Resolved! Import Server Certificates on ACS 5.2

Duo Identity Provider Integration with ISE

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

In a 2 Node Deployment both node will server as Device Admin or Only 1

Adding Secondry Node

Endpoints visible in Live Logs but missing in Context Visibility

Cert-based RA VPN for managed Android device

PAN promotion failed - stuck with two secondary PANs