Network Access Control

Hello,I am trying to integrate Cisco ACS 5.2 in a network to do device authentication of switches for administrators.I am not sure if Cisco ACS 5.2 support RADIUS protocol to do device authentication. In the configuration of the Cisco ACS 5.2 I can o...

I have setup ACS 5.2 in my lab and have it completely funcation with Downloadable ACLs, Dynamic VLANs and the identity store on the backend is Active Directory. I need it to lock a user account in AD if there are to many auth attempts. I have gone in...

I am labbing dynamic VLAN assignment and have run into a small problem.  The switchport is succesfully changing to the new VLAN, but my test PC seems to get an IP address in the native data VLAN before being moved to the new dynamic assigned VLAN.  S...

I have ACS 5.2 running as a VM.  I'm AD, then local authentication successfully for device access, but I want to define ACS user groups to restrict login. I don;t see any way to do this.  If I use AD groups, they don;t show up as selection options on...

Hi All ,              I have SSL certificate issued to my acs appliance by a CA authority , I need to upload this SSL certificate on acs applliance , I have followed below step to upload the certificate from ftp server .1.Choose System Configuration ...

I am using ACS5.1 connected to WLC (v7.x) and frequently see host auth requests in the ACS logs.  I am not interested in seeing host auth requests at all.  Is there anyway just to ignore these.The issue is that these will always fail.  If I enable th...

Hi friend,I have a question its posible to authenticate an cisco phone and PC with the same vlan(voice and data)when i do this configuratión , the phone and pc dont work. The phone display registering and never finished.interface FastEthernet0/5 swit...

HI, I just installed a new ACS 5.1 to authenticate wireless PEAP users, so I created an Access policy "WirelessUsers" with identity store being Windows Active directory and all domain users are selected, and create a service rule that dictates that i...

I can authenticate between our MDS 9216i switch and RSA radius serverbut my role does not come across. The logged in user is a network-operator not admin.In the AV Pair i have defined shell:role*network-admin but it doesnt seem to come acrossAny idea...

Hi AllI am doing MAB (MAC authentication bypass) for IP phones and printers.But these devices are authenticated with different identity stores (IP phones with AD, printer local host on ACS)Is there any specific AV Radius attributes that i can use in ...