Network Access Control

Resolved: ACS4.2 ssh fails but telnet OK for same user

An ACS Internal DB user cannot ssh to a 3750 switch but telnet works fine.Authentication method is TACACS+Other users in the same ACS user group as the problem user can both ssh and telnet to this switch OK.Debug on the switch shows:TPLUS: Received a...

Spotty ACS Login Prompt On Cisco Network Devices

We're using Cisco Secure ACS 5.1.0.44 for LDAP(Active Directory) authentication on our cisco devices. The login prompt is spotty at times. I have noticed that two like devices, say two 1231 AP's with the exact same configurations and IOS, minus dev...

Subnet/wildcard masks in ACS 5.1

We are trying to migrating from ACS 4.2 to 5.1. Abandoned trying to use the migrate utility when we ran into errors trying to use it and TAC said it was an unsupported utility. Amazing that no where in the manual did I see "Unsupported" mentioned.On...

Resolved! Restore an ACS 5.1 instance

Hi there,Does anyone know how to restore an instance of ACS. I've backed it up from System Admin > Operations > Distributed System management as described in the doco, however I cannot find any information on actually restoring it???Thanks in advnace...

Resolved! Cisco 1113 ACS 4.2 1113 configure auth. for Infoblox appl.

Hi there,I have an issue with Cisco ACS and an Infoblox appliance. We want to authenticate users, that login on the Infoblox, via the Cisco ACS. After that the ACS should reply with a passed (RADIUS) authentication and reply with an administrative gr...

authentication problem with catalyst 2960 fresh boot when configure for AAA authentication

Hi !we had recently deployed AAA authentication for authenticate aministrative session on our telecom devices. I have noticed when a Catalyst 2960 switch as justed reload is't not possible to log to in if the switch is not able to communication with...

Can I put radius and tacacs together to one ACS server?

Can I put radius and tacacs together to one ACS server?I test that "radius authentication device" set the aaa server type is Rdius"tacacs authentication device" set the aaa server type is tacacs.the aaa server set to the same.This confige will be som...

Does generating a CSR interrupt service on ACS?

I am planning to replace the current cert on our ACS 4.2 appliance. We use it to authenticate peap users. The question is: when I generate a CSR, will this affect the current certificate and cause an outage for peap clients until I can install a ne...

ACS 5.1 Join AD Permissions Level requirement.

I've been testing new ACS 5.1 (appliances) and have an issue with joining to my AD. Only the top level administrator account will join the domain successfully (not any standard for adding a computer to AD). If anyone knows the 'correct' permissions...

Resolved! Can I reset console password on ACS1112 device running 3.3 using 4.1 recovery CD?

Hi,I am in a situtaion where I need to reset the console username/password on one of our ACS 1112 appliances. No one can remember it.We are in the process of upgrading these devices from version 3.3 to 4.1 (latest version we can run on our only ACS11...

Resolved! ACS CSUtil error

HelloI'm trying to run CSUTil as a local admin (server is in AD domain), and receive the foloowing error..."Failed to initialize crypto api"Any idea's?ACS 3.3.1.11Win2k3 SP1

ACS 5.1: Service Selection Rules - Jump to next rule?

Hi!I have set up 2 rules in Access Policies -> Access Services -> Service Selection Rules.The first rule (Rule-SwitchAdministrasjon) is to give users in a certain AD group access to administer switches.This rule points to a policy called Policy-Switc...

Resolved! 802.1x (dot1x) with IP Phone / Workstation using Multi-Domain Authentication (MDA)

Scenario:Workstation ( behind the Phone)IP Phone 7911 software 8.5(2)ACS 4.1 with AD on the same serverCisco Switch WS-C3750E-24PD with c3750e-universalk9-mz.122-53.SE1.binGuide utilized:http://www.cisco.com/en/US/tech/tk389/tk814/technologies_config...

SASU for ACS

does an upgrade contract service (minor and major releases) exist for ACS 4.1? What is its reference number (CON-SAUxxxxx), i don't find it on the cisco web site, only the SAS (minor releases)?Thx

Resolved! Problems with patching: ACS 5.0 to 5.1 upgrade

I'm following the instructions to upgrade from ACS 5.0 to 5.1But I can't get past the first step:Step 1 Install the ACS 5.0 patch:Issue the following acs patch command in the EXEC mode to install the ACS patch:acs patch install patch-name.tar.gpg rep...

Network Access Control

Forum Posts

Resolved: ACS4.2 ssh fails but telnet OK for same user

Spotty ACS Login Prompt On Cisco Network Devices

Subnet/wildcard masks in ACS 5.1

Resolved! Restore an ACS 5.1 instance

Resolved! Cisco 1113 ACS 4.2 1113 configure auth. for Infoblox appl.

authentication problem with catalyst 2960 fresh boot when configure for AAA authentication

Can I put radius and tacacs together to one ACS server?

Does generating a CSR interrupt service on ACS?

ACS 5.1 Join AD Permissions Level requirement.

Resolved! Can I reset console password on ACS1112 device running 3.3 using 4.1 recovery CD?

Resolved! ACS CSUtil error

ACS 5.1: Service Selection Rules - Jump to next rule?

Resolved! 802.1x (dot1x) with IP Phone / Workstation using Multi-Domain Authentication (MDA)

SASU for ACS

Resolved! Problems with patching: ACS 5.0 to 5.1 upgrade

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

ISE Key Protection TPM or external HSM type key wrapping supported?

NAC Mac Static

CISCO Identity Services Engine (ISE) Device Profile and OUI data

Deployment of Cisco ISE using Azure Local

802.1x Multi Auth

Should Periodic Reauthentication Be Disabled for MAB Camera Ports