Network Access Control

Hi all,another question, we have a Cisco Secure ACS appliance here, and  would like to change its ip address, based on Cisco doc,  this can be done thru the console, but we’re unable to login thru console, Below is the appliance info. any input would...

Hi all,I'm trying to configure Tacacs on Cisco ASR1001, and the Tacacs server is Cisco ACS v3.3, the ACS won't pass the authentication, complaining bad request from NAS, key mismatch - which I compared millions of times on both ASR and ACS sides. bel...

We have two single domain forests with a forest trust between them in our Windows Server infrasturcture.Currently we have Cisco ACS 5.1.0.44 and use RADIUS for VPN, and TACACS+ for Switch/Router authentication.Some users from DomainB cannot authentic...

Hi Guys,i have a strange behaviour under my NAC Server.Today I saw that my NAC Server is in Fallback: Allow All state and the CAM is in Manager: DEAD butin the CAM web administration i can access that CAS.The CAS can ping the CAM too.there are two th...

Hi,I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4.When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows...

I want to know is the trustsec need the setup of ACS 5, can it be trust with other switch by setting the same password to do the encrytion

Hello,On an ASA5520 v7.2 I can only seem to authenticate to the console when using telnet and not ssh. I can connect using both methods, but just have trouble authenticating with ssh. Here are relevent lines related to the issue:username user1 passwo...

If any one of you are interested in setting up opensource tacacs along with RANCID on Unix(ubuntu)i have a small blog on the same with step by step instructionshttp://bejoybkn.blogspot.com/Hope it will be helpfulBejoy

Hi All,we are implementing ACS 4.2. our customer asked us if it's possible that ACS sends email notification if certain commands applied to the router or switch. if it's not possible, what is the best solution to send email notification for certain c...

Looking for the steps to configure wired clients using certificate authentication only - ie, once a certificate is presented to the ACS that is issued by a trusted CA, the connection is permitted.No need to tell me about switch configuration. This is...

I've inherited the adminstration of our ACS and right now it runs on Windows 2003 servers at version ACS v3.x.But I have two ACS 1120 appliances (ACS 4.x) to migrate all AAA to and the previous administrator had things close to completion but I'm con...

In order to develop precise and flexible access control policies, I want to create policy based on group membership. However, the user’s “Identity Groups” selection dialogue box only lets me select just one group per user. How can a user be a member ...

Hi,We have been hoping to deploy Cisco TrustSec for our new mobile working solution.This would basically enable to perform posture assessments and assign resources to users based on usernames, whether they be1. Wired2. Wireless3. VPN usersit now turn...

Hi my friendsI can add a ACS 5.1 to an Active Directory without using the administrator account, I have a domain administrator account by another name. I can use this account to include the ACS domain.I have a account domain admin but when i try to a...