Network Access Control

Working with implementing EAP-TLS in an environment where we have two completely separate Microsoft Active Directory's (different forests, non-trusted).  Each AD has its own certificate authority.  We want out Cisco Secure ACS 3.2X server to be able ...

Hi.I have set up a Windows 2003 Certificate Server to use in AutoEnrollment for machine and user 802.1x authentication, but has run into a few problems.The steps are something like this:I configured the CA Server.I requested a certificate from the CA...

Hi,I have a question about AAA commands. In aaa, I have defined the following:aaa new-model!aaa authentication login default group tacacs+ local enableaaa authorization consoleaaa authorization config-commandsaaa authorization exec default group taca...

I have a 1113 ACS but I can't remember what type of adapter/cable combo I need to get to the command prompt.  I tried the previous solution (standard serial to RJ45 Cisco cable-Terminal adapter) but it didn't work.  I have the RJ45 to RJ45 Cisco Roll...

HiI'm about to do an ACS 4.1 to 4.2 upgrade.  The documentation on CCO says"Note To upgrade to ACS 4.2, you must re-image the appliance. You do not need to use the upgrade package mechanism."Does that mean the whole 4.1 system is blown away and 4.2 i...

I have about 50 routers and layer-3 switches that autheticate via tacacs+.  The AAA server used to be on a Linux machine running open-source tacacs+ built by me.  I have a perl script that will log into all 50 devices at the same time to collect stat...

I am getting this response from my debug but am getting % authorization failed when trying to SSH.   Why?

Hello dears,I have a NAC 4.1 and i m implementing in L2 In-band virtual mode, I also have a ACS Engine 4.2,I m confused,i shld integrate NAC with windows AD or with ACS.If i m integrating NAC with ACS then i have to integrate ACS with windows AD, wha...

Hello experts,I m not much familar with ACS,I want to know other than authenticating user who are accessing routers or switches what else i can do for windows users (local corporate users )for administrators and junior level engineers i have created ...

I have 2 Cisco ACS 4.2 servers that I currently use to authenticate wireless users via EAP-TLS.  I am trying to figure out if I can use those 2 ACS server to allow access to routers and switches with a users AD username and password.  Our network sec...

Hi,Recently  we changed the IP address of our AAA server and we can no longer access to user-Changeable Passwords interface.Where do I change the IP address upon ACSThanks a lot for your help

HiMy question is can we use both AD and a local database to authenticate users for switches?