Network Access Control

We are planning to deploy NAC to inspect our remote access vpn users.Can we use NAC with open VPN or does it need to be a cisco VPN device ( ASA, PIX or VPN concentrator ).

Hi Guys,NEED HELP HERE PLEASE...any one can tell me how to dely the NAC Agent posture assessment or shifting from UnAuthenticated vlan to Authenticated (tihis time betweent) vlan for 1 minut or more.Because when system boots, the first time it gets u...

Dear Team Membersi have a very basic requirement,I have ACS ( running on VMWare) 5.1 . it is integrated with 2 AD Servers ( one in 2K3 domains and another in 2K8) domains, at present ACS is functional for 1: Wired NAC 2: Wireless NAC3: Radius / Tacac...

AllCurrently running 4 ACS 5.1 servers to load balance our 802.1x requests, but am getting an error message which is a bit unhelpful in terms of details.The error message is11051 RADIUS packet contains invalid state attributeand only seems to occur o...

I'm trying to upload the 5-2-0-26-4.tar.gpg patch to our ACS and so far have been unsucessfull. I keep getting the "please verify the patch bundle is valid".When I download the 5-2-0-26-4.tar.gpg file, for some reason the download always comes down f...

Hi,I am fairly new to the 802.1x realm, I have read several documents on how the setup is accomplished and I was hoping someone could validate the setup I have in mind to make sure I am on the right page.  Any comments or assistance would be greatly ...

We have ACS 5.1, and configured an SNMP string.When we try to poll it via SNMP it doesn't respond.  Polling PC is on the same subnet, pulled a wireshark trace and we see the SNMP request hit the ACS, but it never responds.I'm thinking we missed someh...

Hi all,another question, we have a Cisco Secure ACS appliance here, and  would like to change its ip address, based on Cisco doc,  this can be done thru the console, but we’re unable to login thru console, Below is the appliance info. any input would...

Hi all,I'm trying to configure Tacacs on Cisco ASR1001, and the Tacacs server is Cisco ACS v3.3, the ACS won't pass the authentication, complaining bad request from NAS, key mismatch - which I compared millions of times on both ASR and ACS sides. bel...

We have two single domain forests with a forest trust between them in our Windows Server infrasturcture.Currently we have Cisco ACS 5.1.0.44 and use RADIUS for VPN, and TACACS+ for Switch/Router authentication.Some users from DomainB cannot authentic...

Hi Guys,i have a strange behaviour under my NAC Server.Today I saw that my NAC Server is in Fallback: Allow All state and the CAM is in Manager: DEAD butin the CAM web administration i can access that CAS.The CAS can ping the CAM too.there are two th...

Hi,I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4.When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows...

I want to know is the trustsec need the setup of ACS 5, can it be trust with other switch by setting the same password to do the encrytion

Hello,On an ASA5520 v7.2 I can only seem to authenticate to the console when using telnet and not ssh. I can connect using both methods, but just have trouble authenticating with ssh. Here are relevent lines related to the issue:username user1 passwo...