Network Access Control

We use the following constellation: Supplicant -> Cisco Switches -> Cisco ACS -> Open LDAP.Originally, PEAP-MSCHAPv2 should be used, but it doesn´t work with Open LDAP.Now we have to accept another authentication method, for example PEAP-GTC or TTLS....

does any one know if it is possible to install the CAA on a machine then make an image to install it on all enterprise machines ,will this work or not?

Hi,  I have configured remote vpn on my Cisco ASA and users connecting to this will use Cisco VPN dialer and gets authenticated with the Windows 2008 domain controller credentials. Now the problem I face is, when i set the option for user-A as "user ...

We have a Cisco NAC made up of a CAS and a CAM running 4.8 code, based on Cisco security advisory cisco-sa-20111005-nac it is recommended we update the CAM to 4.9 code.  Can anyone advise if a solution running CAS 4.8 and CAM 4.9 is certified as FIPS...

Hello security guru!Please advise me if I can authenticate users/administrators managing ACS5.3 via GUI and CLI against Microsoft AD. I think I heard it from someone from Cisco when a lot of improvements were introduced in ACS5.3 that I can do it. Do...

Hello,     I have installed 2 ACS 5.2 appliances, the two appear as Primary. When I try to register one of them with the other one using "System Administrator -> Local Operation -> Deployment Operations" I get the following message:This System Failur...

Guys, would like to know the support for NAC to cisco IOS 12.2(50)SE1 IPBase version (3750).We have the port bounce feature in test enviroment on switch 3560 with advance IP services IOS 12.2(46)SE and it was working fine, but now we are facing probl...

Hello,About a year ago we were doing an evaluation of ACS 5.0 in VMWare and decided to purchase it.  I applied the license to our eval build and continued some lab testing with it.  Some other projects came up and ACS was never put into production, i...

Hi,I configured a VPN network with VPN client access and all work fine. I have administrative rights on the ASA, so I can add, remove VPN users as I want. I have no AAA server in place. Only SSH or ASDM is used to define users.Now, I want to deploy s...

Hi guys,I'm a CCNP level engineer and I'd like to learn about NAC. My company tried to send me on a training course but they never had enough students to start one. I was looking for some books but all I've found was back from 2007 which is too old I...

As the topic say, is it possible.I imagine I can use the framed-ip-address attribute to assign ip-addresses but there seem to be support for static ip addresses only?A bit of a drag when we're talking 200+ nodes.Thanks.

Hi,How do we disable the telnet to ACS appliance 4.2 1113 SERegardsAmar

Does anyone know the config on standard 3750/3560 IOS switches to have two radius-servers configured but only send to one server if the other fails. The switch is load balancing, but I want the backup to only be used if the primary is listed as dead.