Network Access Control

Resolved! Assigning privileges on ASA with RADIUS

Hello. I'm using ASA 5510 8.2, ACS 4.2 for windows and RADIUS for auth.I would like to assign priv level to user on logon. Docs says that I have to send Cisco VAS CVPN3000-Privilege-Level (id is 220), but I can't see this option in Interfaces configu...

IOS as a simple web server

Dear Community!I would like to use a Cisco router as simple web-server hosting an automatic proxy configuration script file. Is is possible to configure HTTP AAA to allow access without username / password authentication?See the test configuration be...

ACS 4.1 migration to ACS 5.0 for IBNS

I have ACS 4.1 without any service contract (Smartnet). We want to implement IBNS in corporate network. For required functionality I need ACS 5.0. Do I need to buy new software or I can somehow upgrade present version? May be I can buy service contr...

asa sdi configuration problem

case not solved.

not able to install or generate acs server certificate

Hi,I have one test set-up with one layer 3 switch and one autonomous AP 1131. I have configured one SSID and without any authentication and it was not able to connect successfully. But now i want to try enable WPA2 enterprise ( Actually , after check...

EAP-PEAP and EAP-TLS on same switched network

Hello,I'd like to enable both EAP-PEAP and EAP-TLS on the same network to support 802.1x authentication. The reasons are because of historical things i.e. 'older' devices use PEAP and newer devices use TLS. Over time all will be using TLS, but for n...

Resolved! ACS 5.1 tcpdump tech dumptcp 'feature'

HiI'm just installing ACS 5.1 for the first time and came across the tech dumptcp 'feature'.This command seems to be almost completely useless for capturing packets at the ACS 5.1 OS!It's not possible to specify a filter or capture the packets to dis...

Resolved! Cisco - Privilege level is always 15

I'm using RADIUS for the AAA process. When I was running IOS 12.2 on routers everything was fine, but after upgrading to IOS Version 12.4(12) users gets always priv-lvl 15 regardlesswhat I set in RADIUS profile for the user.I don't understand why rou...

ACS 5.1 on Vmware

I have installed ACS 5.1 and im having issues trying to patch the server. For some reason i cant even upload the new patch 5-1-0-44-3.tar.gpg into ACS 5.1. Its looks as though its loading in then disappears. I have tried installing patch 1, but the s...

ASA 5510 VPN Authentication vs PIX Authentication

I have a customer who is using a Pix firewall for his remote users and has setup a VPN Group and password and sent them all the .pcf file, they do not have to login locally or into a Radius server, just lanch the VPN client and there connected. On t...

Resolved! ping problem from ACS

Hey guys !Need your help!I'm configuring a ACS 1113 and i had a weird problem , i've disabled the CSA to enable pings ok, it works from my PC to ACS but the ACS can't ping my PC !I'm also having another problem , i can access the ACS and it's all con...

External DB not operational

We are moving from a Novell to a Microsoft AD environment. The Domain controllers are running 2008. Running ACS 4.2 on a ACS SE appliance. So, we need to have a Windows remote agent. We have the unknown user policy active and we have some group m...

Prevent multiple user login cisco ACS

Hi All,I have a group setup in Cisco ACS (V4.2) which holds dynamic users that have successfully authenticated through wireless. No problem. The users in this group have authenticated from a guest wireless setup. I want to prevent the same user from ...

Resolved! ACS 5.1 and ACE authentication

Any guidance on configuring the shell profile for RBAC on ACS5.1 for ACE or Nexus 1000v? I've configured 4.x before with ACE and it works fine, but I can't seem to get it to work right with 5.1. On the Nexus it always logs me in as vdc-operator. On...

Changing ACS to Network Devices Groups

If I cahnage my ACS Servers to support Network Devices GroupsWill I loss all the defined devices or are they moved to a default Group, which will then allow me to move them around ?ThanksIan

Network Access Control

Forum Posts

Resolved! Assigning privileges on ASA with RADIUS

IOS as a simple web server

ACS 4.1 migration to ACS 5.0 for IBNS

asa sdi configuration problem

not able to install or generate acs server certificate

EAP-PEAP and EAP-TLS on same switched network

Resolved! ACS 5.1 tcpdump tech dumptcp 'feature'

Resolved! Cisco - Privilege level is always 15

ACS 5.1 on Vmware

ASA 5510 VPN Authentication vs PIX Authentication

Resolved! ping problem from ACS

External DB not operational

Prevent multiple user login cisco ACS

Resolved! ACS 5.1 and ACE authentication

Changing ACS to Network Devices Groups

"Content is not allowed in prolog" via /admin/API/mnt/Session/UserName

Posture assessment report never finishing

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

PX Grid Connector and Service NOW

NTLM Disabled and ISE-PIC

Impact of Resetting ISE Context Visibility on Endpoint Connectivity

Cisco ISE posture for Wi-Fi is stuck on Action Needed

ISE pxGrid client/server certificate creation and renewal

not able to export scheduled reports to repository