Network Access Control

Is it possible to set up Exec level privleges and their associated commands in RADIUS? I am looking to set up a sub level, say 7, with limited CLI privileges. I can do this locally but want to have the person telnet to router, get authenticated by RA...

Hi,We are using ACS 5.2 and we are trying to create a Microsoft Active Directory (AD) Identity Store. We have a user to be used in the Active Directory creation General page and we would like to know how the test communication / ACS to AD communicati...

Hello guys, Could someone help me out. I encountered some strange issues with one of our appliances in the field. Reinstalled the damn thing and encountered the strange issues. No errors.. did some memory test and the seagate harddisk test and encoun...

Hi all,I would like to disable NAC policy control from my ACS 4.0.I would like only 802.1x AAA on my switch ports.Also I'd like to assign a different VLAN to different MAB devices by RADIUS user attribute, in order to differentiate vlan for printers,...

We have a client that has the vmware image of Cisco ACS 5.2.  They installed in on a vSphere ESX 4.1 server and after it was done installing, the received a login prompt and not a prompt to continue setup.  They tried using the default login username...

hi guis!i want to map 2 groups from external AD to 2 internal groups. like it was in 4.x. can someone advise me how to do this?

I had dot1x working with a guest vlan, data vlan and voice vlan.  I have upgraded my IOS and now im having this issue:1.  IP Phone can register with cisco call manager (Great)2.  Plug in a computer on the domain with a certificate into the phone and ...

After configuring an ACS and having it up and working on a large number and types of Cisco Switches and Routers.  I am faced with this the way it was configured , it should have a fall back to local user and password if it can not reach the ACS mine ...

Hi,Iam trying to integrate ACS 4.1 with AD 2008 but its not working, where as with AD 2003 it works.can someone help me on thisThanks Ravi

I have downloaded the new Cisco ISE, I've managed to configure 802.1x and MAB succesfully but I want to configure wired centralized web authentication, but I cannot find any documentation how to configure ISE and Cisco Catalyst (IOS) switches to use ...

I've configured 802.1x with dynamic VLAN for users and MAB for phones - it works fine. Now I wanna to implement client provisioning and posture validation for users. After reading ISE user guide there are still several big questions:1. Is it possible...

Dear,FriendsI have NAC working on Out-Of-Band Vitual Gateway. When I Enable Port Security on the CAM, this don't work very well.I need allow two mac-address for interface, one workstation and one phone.The first User is authenticated and placed in th...