Network Access Control

Hi friendsI have running AAA against IAS and I want to move to the FreeradiusWhat I was not able to solve is the freeradius part.I know that this is probably question to Freeradius maling list, but I was not able to find an answer thereI have running...

Hey everybody,I'm using two Windows 2003 Servers with local users as External User Databases (so they're both usind the \LOCAL domain) for my ACS 4.2 appliance. I've added the machines as Windows Remote Agents and configured them as Primary and Secon...

Hi,I have acs 5.0 and i am trying to get this with AD but when i do the test connection i have a log that say CLock skew.I have the acs with ntp and zonetime but AD does not have ntp but the clock its almost the same. People that manage AD does not w...

Trying to set up 802.1x dynamic VLAN switching, and have a question. I think I've gotten it working except for one part. The VLAN on a protected interface is never getting switched. I can see an entry in the ACS stating that it applied the appropriat...

Hello,I have a question, I have an ACS 4.2 Appliance 1113, my question is: can i configure another ACS 4.2 Appliance in hardware 1120? and these work in High Availability replying the Data Base with External Database and CA, etc?Best RegardsAlvaro Pé...

Hi all,have a ACS 5 appliance and run version 5.1.0.44 on it. The performance of the web GUI is really bad and when I try to access "Monitoring & Reporting" for the first time, I got completely logged out and have to login again. Happens with Firefox...

Hi@all,i want to implement a port based NAC with Windows Server 2008 NPS acting as RADIUS and some Linksys/Cisco SRW2024 - WebView Switches, using EAPoL and MD5-Auth.(SRW2024: http://www.cisco.com/en/US/products/ps9989/index.html)I am able to authent...

Hi Folks.I have a pair of ACS for windows 4,2 and we also have a few mappings (ACS Group --> AD Group)The replication process was configured and it replicates all the seetings, but the Group Mappings.Is this the way it's supposed to be or it should r...

Is it possible to restrict a user account in ACS to be only allowed from a specified source address?We use token cards for normal admin access but we have an automated script that backs up the configs and therefore uses a static account. We have imp...

hi,i am trying to get around 900 cisco routers authenticated through Cisco TACACS+ ,while doing this i added two clients and two users corrosponding to them,i hav two issues1# if there is a user and a group each needed for each client if we add them ...

Good morning,I need to assign diferent authorization profiles to remote users based on their active directory group.I have read that cannot use identity-based condition in a service selection rule.Any idea how can achieve it if remote users auth requ...

I am trying to figure out how to tie a command authorization set to a shell profile in ACS 5.1.In ACS 3.3 within the Shell Profile there is a section that has a drop down menu where you select the command auth setyou want to associate with the Shell....