Network Access Control

Getting started on ACS 5.0, pretty comfortable with 4.x.I think i've got everything set up to authenticate against AD for Tacacs+ device logins.  When i check the logs, i see:"24408 User authentication against Active Directory failed since  user has ...

Hello,I have just recently purchased a 5505 Controller and 30 3502i AP's. On my main corporate WLAN, I would like to allow users to be able to authenticate via Active Directory username and password.I am also looking for as little client side set up ...

Hi,     I am having trouble viewing all the Administration logs in ACS View. I have my Local Log Target set to a Maximum log retention period of 90 days. In ACS View I can display authentications that go back 90 days +However when I try and display t...

Is there a way to restrict the helpdesk account only able to add/remove MAC address from the host filter table?  It would be better if doing this via web or API.Thanks,

     Hello at all,we have a Problem with a ACS 5.2. We have installed the Software on a VMware. The Machine ist running without Problems.Now i would like connect to our AD. The connection is o.k but i can not see any Groups when i make a search.I get...

Hi,Community I have a problem with my 802.1x Solución in ACS Version : 5.2.0.26. The hours betwen  my ACS and the AD lost synchronize, for that reazon the user in my network can´t autenticate in the Solución. when i see the hours was different for th...

Hi all,I would like to authenticate users connecting to VPN (Remote-Access) by RADIUS and EAP-TLS (certificates). Is it possible?I tried to do it and created lab in GNS and configured FreeRADIUS to use EAP-TLS but it doesn't work...My router config:!...

I have installed ACS 5.2 and configured it to join the Company's Domain as an External database with Active directory 2008.I'm facing a problem that the user once authenticated using it's active directory account it's cached in the ACS and take a whi...

When I try to SSH from ACS 5.2 CLI to my SFTP server I get :Unable to negotiate a key exchange method.On the SFTP server (Tectia) I have the encryption configured with aes256 and hmac-sha1.Any help appreciated.Thanks,G

We are setting up a new wireless network with multiple SSID's.  We plan on having an internal network, a guest network, and a personal devices network.  The questions is how do authenticate against multiple policies on the same NPS server?  Our curre...

Hello,Is there a way to authenticate a windows computer in ACS 5.2 for 802.1x only with a certificate.The Computer is from a different active directory than the one that is configured in ACS.I tried importing the cert into "external indentity Stores"...

Hi All, can any one  has done the implementation of 802.1x with alcatel phone where pc will be behind the phone and cisco switch ports are configured as trunk. Trunk native vlan is data vlan for pc and trunk carrying voice vlan.when trunk mode is ena...

Hi all,my problem:how to straight away enter priv EXEC mode when authenticated for asr1002?? Using XR12000, it can be done but asr1002 have to input enable passwd...my username for asr1002 have privilege 15 and i want to enter priv EXEC mode straight...

Just starting to implement MAB and was wondering if there is a way to check for MAC addresss that have not been online in over 6 months.  There are only so man MACs that the ACS can hold, and I dont want systems that have been removed from the compan...