Network Access Control

1.48 port Cisco 3550 Series 12.2 with enchanced feature set has to make dot1.x for the clients with windows 7 Pro OS. The radius must be W2008 Standart.2.WInd2008 NPS is configured with Network policy and appropriate NPS client settings. It works whe...

I am trying to setup group mapping on ACS 4.2/Windows for group mapping as shown below.ACS--->Ext db--->Group mapping--->windows--->choose domain---> add mapping----> choose NT group and pick one acs group-->submit.Wireless LAN users --> members of "...

HI ALL,IS THERE A WAY OF ENFORCING AUTHORIZATION ON THE ACS USING USERS ACCOUNT ON THE DOMAIN CONTROLLER?PRESENTLY, I USE THE INTERNAL USERS DATABASE ON THE ACS TO ENFORCE COMMANDS AUTHORIZATION. BUT, I WANT USERS TO BE ABLE TO USE THEIR DOMAIN ACCOU...

Hi All,I have a requirement on our wireless network to ONLY approve authentication from machines that are pre-approved. We have our wireless network setup and it's all working well using RADIUS to Microsoft AD servers on the ACS for end user/machine ...

Dear all,I want to config 2 ACS Server, one is Primary and the other is Secondary and I have 1500 devices. Now I config 800 devices point to Primary server and 700 devices point to secondary server. Does it work?If it dont't work,I must config all my...

Hi,I have successfully configured a new Linux based Cisco Secure ACS server (version is 5.0.0.21 and Internal build: B.2757) and integrated it with AD. Both the internal users and the AD users are authenticating ok and are successfully logged onto th...

I am trying to set up AAA for managment on my ASA. I have the admin users up and working fine. Now I need to set up access so that my help desk users have the ability to monitor VPN sessions and log them out via the ASDM. I don't want them to be able...

I have users that require multiple custom attributes under the TACACS configuration.  Below are the two that are required, one is for Cisco UCS and the other is for MDS.  My question is what is the format to get both of them to work for the same user...

hi All,I am trying to do a simple switch TACACS+ authentication via the ACS Express.ACS Express - 5.0IP address (172.16.4.10)Core Switch - Catalyst 4948 vlan 1 (192.100.100.1)vlan 10 (172.16.4.1)Access Switch - Catalyst 3560vlan 1 (192.100.100.2)Prob...

Dear AllI have configured the 802.1x with PEAP auth. on my LAN with ACS 4.1.ACS 5.x is there now, What the enhancement and features added to the ACS 5.x related to 80.2.1xPlease advise in details because we need to buy the ACS 5.x if it has enhanceme...

Hi All,I have NAC version 4.7.1 and i have implmented it as out of band virtual gateway and when i make the port NAC controlled and try to test it works properly but when i remove the pc from the port, the port doesn't go back to authentication vlan....

Hi guys, Do you know if it´s a bug in the ACS v5.1 related with the Username prefix strip when you use LDAP servers as authentication server?I have a deployment using LDAP and 802.1x wired, the ACS received DOMAIN\User but it doesn´t strip the domain...

I am trying to determine the maximum amps rating for the Cisco ACS 1121.  The Model is CSACS-1121-K9 V01Thanks