Network Access Control

HiI am using ACS 5.1 and have an ASA using RADIUS towards ACS. Useres are authenticated using Certificates, but should still get a Class ID from AD via ACS 5.1. ACS 5.1 has an LDAP Connection to AD to read out the specific Attribute.Everything works ...

Recently I have implemented 4 ACS server over Windows. They will be using RSA SecureID server as external DB for authentication. After I installed the ACE client on the servers and do the necessary configuration, only two units are working fine, whil...

Hi,i have a problem with the command on Cisco Device when i configure a range of Interface then i have this messages: /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Normale Tabelle"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0...

Ok. I'll go out on a limb here, what is the risk of a compromised tacacs server key? It doesn't seem like all that much. You can use it to try and authenticate a user against the server directly?Is there a reason that the key is encrypted using Cisco...

Hi,We use ACS for authenticating equipments but lately when loose conectivity with server, equipments do not allow us to enter "enable" mode (even at console) only at first level, so could somebody give some light on where am I missing something?Here...

hello,    we have an operational ACS4.2 with NDG not enabled.   Just trying to find out the service impact of enabling NDGs on the existing AAA clients?Will the existing clients be left in the top level with no NDG? The MAR feature is also operationa...

Hi all,I seem to be getting lots of failed attemps in my logs that look below.. We have checked the particular device and theirs nothing plugged into it?Any help would be great.. i have checked this post but there was no valid answer..https://support...

Has anyone here ever used the ACS feature Machine Access Restrictions in a wireless enviornment with PEAP?  I am looking for a way to prevent non-corporate owned assets from getting on to our wireless network.  Right now, I have PEAP working with the...

I'm having a problem logging on to my ACS gui, I get the message above. No changes have been made to my system or the ACS since it was working last week. It's not that I am coming from an invalid IP address, as we have not set this to filter by IP. N...

What is the best way to use DAP when using RSA for user authentication. I really do not want to have the users have to authenticate twice, once for tunnel authentication through RSA and then again for AD authentication. Is there a way to add users to...

Enabling TACACS single connect on our 6500 sup720's (SXI code) seem to produce significant delay (~5 seconds) when initially running commands from within a new SSH session, and also periodically the same delay is incurred. This does not seem to be th...

I've a CACS-1120-K9 with base license , configured dot1x authentication for end-users, but i can't find out how to enable the UCP(UserChangePassword) function as ACS 4.x.I know ACS5.1 could do this with "acs user-change-password" cmdBUT , is there ot...