Network Access Control

Hello,I am trying to use ACS 5.1 with Active Directory and do 802.1X EAP-TLS for wired and wireless access. We need to map users to an identity group to assign VLANs, dACLs, etc., but having an issue mapping a certificate based user to AD attributes....

I have a couple of WLCs that I have configured to use mac authetication and using ACS 4.2 as the mac address database.  Both controllers are using the same shared key for ACS.  ACS has both WLCs configured.  I have double checked the configurations a...

Hello,I'm Newbie with ACS equipment, i'm trying to implement it to secure our WIFI environment. One wifi SSID is broadcasted on a site, I would like to authenticate WIFI client through machine certificate.The big deal is that some client computer bel...

I have a wireless environtment with Cisco WLC 5508 and some AP. I am using an ACS 5 has an external database of Active Directory. I also using a Windows Server 2003 as a Certificate Authority.I tried using PEAP(MSCHAPv2) and the client successfully a...

Hi There,I have one ACS SE 1113 and another SE1112.  Both devices are running 4.2.0.124.  I setup both devices and had replication working properly local just yesterday.  The 1113 was on one subnet and 1112 on another. It worked perfect.  I moved the...

I couldn't find anything relevant, but apologies if it has already been answered.Is there any way of encrypting the traffic between a switch and a radius server when using radius to authenticate switch logins? As far as I can tell the traffic is pass...

Hi,does anybody know if I can use a encrypted algorith for password in order these password cannot be decrypted with any software? When I use "service password-encryption" command, password is encrypted with a Cisco proprietary weak encryption algori...

HiIn ACS 5.1, when defining the users, you can click on "change password on first login". So far, when the user is created this way, it is not even allowed to log in with the assigned password, and as a result it is not asked to change the password e...

Have this working for IPSEC VPN on same box (tested on 8.2.1 and 8.2.3)Want to do cut through proxy with challenge response - same ASA and same RADUIS server but using aaa authentication match command and this is what happens...It looks like the ASA ...

Hi all,I have an environment with Nexus 5000's and 6000's that are running UCSmanager.  My problem is that it seems that the two switches both use theCisco-AV-Pair but have different roles associated with admin level privs. For example, I have succes...

Hi !I planned to migrate our MDS switches to TACACS+ for AAA services.  I the documentation I find some different way to defining attributes :http://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_2_x/fm/configuration/guide/radius.html#w...