Network Access Control

HiChanged my AD password and now i cannot get into the enable side of the cisco switches on our network (we have no routers).Looking on the logs for the ACS v4.2 I can see the following -On TACACS+ Accounting you can see the connections which have wo...

Hi forumers'Would like to check what kind of access switch is support wired 802.1x, do cisco have a hardware compatible checklist for it?Backend Radius server would be Cisco ISE. Business requirement is able to support flexauth. Current infrastructur...

Hi, I check on ISE monitoring to see the authentication status, i found out IP and device port left blank. What should i do in order i can track user is connected from wchich access switchport (all switch were join identity\ network device)Somemore, ...

HI Experts,Is there any solution or device are there to do  port blocking????i.e I will configure one policy, if anyone violate that policy, that port automatically needs to block. Then administrator only needs to enable that port.For example i will ...

Hello, I have configured ACS 5.1 and using Tacacs. I have two juniper SSG140 FW's in different subnet. Tacacs authentication is working on one SSG140 FW, but not on the other one. Tacacs configuration on both FW's are exactly the same. Both FW's have...

Hello Everybody,I installed NGS 2.0.2 for wireless guest user management and authentication. I implement webauth via webauth page on wlc deployed.One Branch with a WLC5508 version 7.0 wireless anchor controller is working on the NGS.But now I integra...

I'm trying to figure out how to put this lot together, but dont know enough about ACS when used with an external CA.What I want to get working is:A PC with a machine cert gets connected to a switch running 802.1x. The switch uses EAP with .1x to quer...

Hi All,I am stuck a place where i need to select mulitple users from identity group and multiple devices from multiple ndg. situation become worst when i hv two different level of access for the users which are in same ad group but have different acc...

Hi, We have a problem with 802.1x configuration via IP Phone.PC (win7 with certificate)-------IP Phone (7911, 9.2.1s firmware)-----switch (2960, lab base 12.2(58)SE2)Configuration on the port on the switch:interface FastEthernet0/3 switchport access ...

Hi all,I have a pair of physical ASA servers v4.1. Now I need to virtualize them. Do I need to buy any new license? Or I am able to transfer the existing licence from the appliances to the virtual servers.In case I am able to transfer license from th...

Dear Friends, Is there any document to integrate between ACS5.2 and Windows Server 2008R2 for Wireless PEAP Authentication ?Is it possible to acheive authentication to Wireless through two ways 1.ACS 2. NPS (Built-in for Windows Server 2008). In this...