Network Access Control

Hi there,I have 2 ASA 5520 (v. 8.21) in a active/standby failover configuration.VPN users are autenticated against the MS-AD through LDAP. For the most part this works well. Occasionally I'm having problems with new users in the AD. If I run a test I...

HiI've Cisco NAC deployed, and all is good so far. Lately, I've added an internal WSUS Server in my LAN. Hence, what I want to achieve here is, I want all my LAN users when accessing into the LAN via Cisco NAC, the Cisco NAC should check with the int...

Hello,I configured dot1x on my swicth 4500 series, Here is the interface configration:interface FastEthernet3/2 description Test dot1x switchport mode access load-interval 30 authentication event fail action authorize vlan 800 authentication host-mod...

HiI have a web srver behind ASA fiewall, server team s managing this sever throuh ssh access. I wanted user authentication to be enable when ssh traffic passes through ASA. I cofigured user authentication but web server team are not able to connect t...

I am scratching my head with this but getting more confused: Background:The customer has a 2 CAS servers. One CAS is already in production as OOB-Real IP Gateway for their wired LAN users. They want to use NAC for the remote-access VPN users and wire...

Hello,I'm am looking for a OID to poll the status of dot1x configured ports, when the port has been disabled due to a DOT1X-5-FAIL I would like to see this when polling the switch. So far I'm not able to I have used the MIB's below, but I can't finds...

hellois it possible to use wildcards in Compund Conditions in ACS 5.2? i've been suing the following to try and match a username that contains @*.*:This would hopefully match a username like [email protected] but doesn't work as expected - am i d...

I'm installing ACS4.2 in our lab domain and want to leverage the corporate domain for authentication.  The one way trust is in place, but there is a facet that I'm not clear on in regards to the installation requirement.I'd like to install ACS on a l...

Accessing the access point via telnet radius authentication works with no problems.  When I access via secure http I can authenticate, but I get level 1 or read access only.  Can someone assist.  Below is the config for the device.  no service padser...

On the CLI, we have ACS showing:clock timezone Etc/GMT-6!ntp server 10.10.10.1A show clock shows the correct local time.  When in the GUI of ACS the clock reads Tue Aug 30, 2011  21:13:58 GMT+06:00  Our NTP server is showing the correct local time al...

Can anyone help?  This prevents the PC from passing posture assement and places it in a "temporary role".  I know how to disable the scan, but we would like it to work correctly.Same results on several PCs, Windows Xp SP2 or SP3, Windows 7 (32 or 64-...

I want to configure IEEE 802.1x port-based authentication on cisco switches, preferable 2960 series. Which models support this feature?. I have try with some older switches but it doesn't works properly on everyone. I have upgraded them whitout bette...