Network Access Control

I am using ACS5.1 connected to WLC (v7.x) and frequently see host auth requests in the ACS logs.  I am not interested in seeing host auth requests at all.  Is there anyway just to ignore these.The issue is that these will always fail.  If I enable th...

Hi friend,I have a question its posible to authenticate an cisco phone and PC with the same vlan(voice and data)when i do this configuratión , the phone and pc dont work. The phone display registering and never finished.interface FastEthernet0/5 swit...

HI, I just installed a new ACS 5.1 to authenticate wireless PEAP users, so I created an Access policy "WirelessUsers" with identity store being Windows Active directory and all domain users are selected, and create a service rule that dictates that i...

I can authenticate between our MDS 9216i switch and RSA radius serverbut my role does not come across. The logged in user is a network-operator not admin.In the AV Pair i have defined shell:role*network-admin but it doesnt seem to come acrossAny idea...

Hi AllI am doing MAB (MAC authentication bypass) for IP phones and printers.But these devices are authenticated with different identity stores (IP phones with AD, printer local host on ACS)Is there any specific AV Radius attributes that i can use in ...

We are in the process of testing 802.1x authentication and one question came up that I can't seem to find any documentation for:Is it possible to have the Call Manager directory as an external database for the ACS so that we can authenticate the phon...

Hi Experts,We're using AAA Sec4.1 and we need to bind the username with IP address for remote VPNs configured on Netscreen ISG2000 firewall. We want AAA should check two things against any user first IP address and second Username in order to authent...

HI all,           We are having some authentication issues with windows 7. The issue some windows 7 machine fails randomly. We are using ACS 4.2.1 MS-PEAP with machine authentication, every now and then a pc fails to authen. And the log always show t...

HiI have a setup were all users (LAN & WIRELESS) Are being authenticated using Dot1x with ACSIn case of ACS failure (without a secondary one), I know i can configure the switch port on the LAN to have a critical VLAN, so in case ACS was detected as D...

My customer is tight on SN space, so they set up 400GB for the ACS AM.  I saw a message about having less than 500GB flash by during the DVD install, but it seemed OK otherwise.  When the VM boots off the HD, I get the localhost login prompt, and I t...

Is it possible to edit the hosts file on an ACS 1121 server running ACS 5.2? Our problem is we have a single domain with multiple domain controllers at different sites. So when the ACS server tries connecting to the domain it randomly picks a domain ...

hi. have a issue with installing the Cert on ACS 4.2 . recently our ACS cert is expired and we got the new cert and installed.when accessing https://ACS:2002/ Cert error." There is a problem with this website's security certificate " I checked the ce...

I am configuring SSH access on our switches, routers, and firewalls and want to know if I can configure Internet Authentication Service on our Windows 2008 server to authenticate these SSH users.  I know we use it now for our VPN users but am not sur...

HiWonder if any one has an idea on this?We have two ACS, 1 windows and 1 appliance.The appliance is the primary ACS.The other night all our wireless devices failed to authenticate.  We tracked this down to the Windows server with the ACS Agent on it ...