Network Access Control

Hi,I want to configure ACS 5.1 with PEAP eap method and AD database replication or if  somebody recommands other eap method than peap which is  less complex and secure , it would be great help.how to go about ?I want to configure one ssid with mentio...

Hi,I have acs 5.1 installed on ACS 1121 hardware appliance. Now i want to get external data from AD replicated in ACS box. how to configure ACS to get replicated user database?what else I need to get details from windows administrator for AD replicat...

Hi,I have a switch 3650 with the IP base image IOS 12.2(25) SEE3, a polycom phone SoundPoint IP 430 SIP, A radius server IAS 2003 and a Windows XP PC.I enabled the windows XP pc for wired authentication ( started the service Wired AutoConfig, added t...

I have a 3725 that was using tacacs for auth but that is not working with our new ACS 5.1 server so for simplicity I would like to switch to radius. The authentications pass but the dial in user gets error 738 "didn't assign an address" My auth on th...

First the background - we have four ACS5.1 appliances (all at patch revison 4), Box1 is the management box - so just used for accessing the web interface and setting stuff up, boxes 2 and 3 do the main bulk of the work and box 4 is basically a spare....

Hi,I have PEAP-MSCHAPv2 working with user name, but can't seem to get "machine authentication only" working. I need to logon to the domain using username and password before it is 802.1x authenticated. I want 802.1x to authenticate using only machine...

Hello,I am about to implementing dot1x in our LAN. I understood that I have to use multi-domain mode to get this work well ifI use ip phones and PCs attached after the phones.I have Avaya 4600 phones which only supports EAP-MD5 authentication.In Avay...

I know this has been asked in a few different ways but I need to clarify the user experience under the following configurationMy ASA uses ACS4.2 as a radius server and it also provides downloaded ACLs depending on the users group within LDAPOur Secur...

We are having a bunch of SSL VPN users authenticating via Cisco ACS RADIUS. The ACS is getting the accounts from a LDAP server (Novell eDir). Is there some way to make password expiration work at the SSL VPN client?Rutger

I am trying to setup ACS 5.1 to pass the VSA attributes as defined in the NX-OS config guide, but I cant find TACACS+ VSA as an option in ACS 5.1, only RADIUS VSA.From config guide:"The Cisco TACACS+ implementation supports one vendor-specific option...

I'm in the process of creating command sets for read-only group and am trying to figure out how to create a command set that allows for all 'show' commands.How would one wildcard the argument to allow all sub-commands for show? Would you just use an ...

Hi,is there any example how to add/remove a internal host via python script, like you would do it via the GUI under "User and Identity Stores -> Internal Identity Stores -> Hosts" ?regardsDirk