Network Access Control

Hello,I have an ASA 5520 with 4 interfaces. At the moment is connected to an ISP-A via its outside interface; and to an inside private network A via inside interface.I would like to connect another ISP-B and create a DMZ. I want to route to the new ...

Hi all,I configured LDAP on acs 1120 appliance,but i don't know how to fill parameter on ldap configuration:Subject ObjectClassSubject Name AttributeCertificate AttributeGroup ObjectClassGroup map attributeSubject search baseGroup search baseMy domai...

For many organisations the Cisco Secure ACS server is the guardian of the network - controlling administrative access to routers and switches plus overseeing end network users over VPN, wireless and firewall.Its no surprise therefore that it should c...

Hi Pros,              I run into some when trying to use guess vlan in dot1x authentication. The client is able to grab an IP in the guess vlan;however, it can't go to the Internet. Client in the guess vlan is able to ping other vlan(different subnet...

Hi,I'm just evaluating ACS 5.1 for the first time. I'm trying to use EAP-TLS for machine authentication, and use AD to look up group membership for Computer Accounts to determine authorization.The problem I'm having is that ACS is authenticating the ...

Hello,I'm working on a test rollout of 802.1x. I have a few (hopefully quick) questions that I can't seem to find in the docs...1) Is there a way to configure a switch to use two separate RADIUS servers, one for auth/authen and one for accounting?2) ...

I have one set of ASA's with users who need to hit two different identity stores on the ACS.  One group is normal users hitting Active Directory via LDAP, which currently works perfectly.  I need to add a group of users that will be application based...

We are working on installing ACS 5.0 through VPN and on an applicance. We are concerned about giving full windows domain admin rights to a generic account. What are security features are required to give the ID what it needs to authenticate through t...

Hi all, We’ve a large problem with our new setup ACS. We have set it up to use windows active directory as external user database. The authentication works fine and most within expected times. Our major problem is if we want to change something withi...

HiWe are using ACS 5.0 and enabled dot1x , the access switch are configured dot1x port based auth , we are getting error 24427 Access to Active Directory failed ,the isssue could be the ACS is not talking to AD , but the test connection was sucessful...

Hi,I don't know how to using Ldap on acs 5.0 appliance. i need configuration example document. can anyone help me??Thanks

We have a VPN and a WiFi authentications thru an ACS @ 4.x to an external database.   Using the unknown user policy pointing to an windwos database this config works at one of our sites (main site).  The main site replicates to our backup site  but d...