Network Access Control

NAC 4.7(2) authentication SSO with Active Directory on WinServer2k3 crashed after update the next fixes:KB2478971          KERBEROS WEAK HASHING ALGORITHMSThis update addresses the vulnerabilities by preventing the use of weak hashing algorithms in b...

we are turning off Mixed Mode in our AD environment, a change from which I'm told there is no retreat. Are there any configuration changes that need to be checked to support a 'Native' only AD environment.

Hi,I changed my ACS 5.2.0.26 from a joined active directory to a new active directory domain, everything is ok for the test because i can see in ACS :Joined to Domain:.tp.group.local Connectivity Status:CONNECTEDit means that ACS is connected to AD.N...

reposting as with subject including v5.2:--------HelloI have an ACS 4.2.1.15 patch 3 and Novell Netware LDAP Server separated by a Firewall. The Firewall's default tcp session timeout is 3600 seconds.When no LDAP-Request is made for over one hour, th...

Hello,Am having somes problems changing the role of my AD validated user on my nexus.Users are validated against AD then am trying to push AVpair attribut to change the user role to network-admin.All setting are getting assign to my user ( access pro...

We have a 5400 plataform configured with Radius Accounting and I am seeing that the attribute 8 (Framed-IP-Address) appears only in the Stop message.The cuestions is...how i can to do that the attribute 8 will be included in the Start message too?Reg...

We have a Cisco 7206(IOS12.2(33)) equipment associated with freeRadius server2.1.10.  Upon PPPOE client start, dynamic IP is assigned from the IP-Pool to the PPPOE client. However this IP address, is not included in the Frame-IP-Address AVP sent in t...

DudesWe had problem in replicatiing database to secondary ACS (4.2) server, Somehow I've managed to fix the issue by changing firewall inspection and shared secret.Now I've got new issue with "command authorization failed" after successfull authentic...

Hi group ,help me with the following aaa commands1)aaa authentication login default group tacacs+ nonedoes it means if my tacacs server fails , the user will be authorized immediately (no authorization done ) as the next method list is "none"2) aaa a...

I have IAS running on Windows Server 2K3 with a WLC 4400 controlling several APs.  What I would like to accomplish is this:WLAN 1 - For normal domain users, radius profile set to match on Windows Group Domain Users.WLAN 2 - For Executives, radius pro...

HelloI've been trying to set up my ACS to perform a backup but I'm having some trouble:I set the repository:repository tftp  url tftp://10.40.1.102/I run the backup:acsbackup config-ACS repository tftpFailed to perform ACS backup: File transfer error...

New CUWN - WLC/WCS/ASC - Intention is to allow each student in a dormitory to authenticate to the wireless network with a maximum of (3) devices… i.e Wii, laptop, iPad… additionally limit the bandwidth per device or per user. Will the combination of ...