Network Access Control

Dear Sirs,1- I want to deploy a cisco nac solution.I have purchased one nac manager and one nac server. An external aaa server is it mandatory in order to deploy the solution ?2- Nac deployed in inband mode is it compatible with non cisco switches ? ...

I have setup AAA with LDAP on my Windows 2003 AD servers. Normal authentication seems to be working fine, however if I set a user to require a password change, I get a Malformed Password error in the logs.I am using this with the Clientless SSL porta...

Hi guys,I have cisco 3750 switch on the site and users with in the site are using WYSE terminals to access their session from DC and CITRIX servers from data center.Router on MPLS Cloude >> CISCO 3750 Switches>> Usersis there a way or authentications...

Hi folks,One of our clients wants to migrate from their Fortinet appliance (Fortigate 200A) to Cisco ASA and their main stumbling points is that they want to keep their current Internet access policy, namely control access to internet for various use...

All,We had a 2 MS Windows 2003 Servers that was running 4.0. We managed to upgrade the DR server to 4.2 without any issues, but when we tried to upgrade the PR server, we got CRYPTO errors. We found the answer to this problem here by deleting the fil...

Hi,I have set up an Active Directory database as an external resource via Generic LDAP option (I didnt set up via windows database option as my infrastructure does not allow me this). I am trying to authenticate with no luck. The report database cont...

I am struggling to configure a 2960 switch to use Radius server for authentication and authorization. Here is my config on the switch:aaa new-modelaaa authentication login default group radius localaaa authorization exec default group radius local!ra...

Some Shared Profile Components were installed for Cisco Security Manager.  We're trying to do some testing and I need to remove these from our ACS server.Does anyone know how I can do this?Thanks.Jason

Hello,I have 3 ACS servers on Windows. I manage with my system admin the way to use certifacte use by the Activite Directory root authority. So, he created for me 3 certificates. I installed certificate on the ACS servers and all of them said certifc...

Hi,I am trying to use Mac authetication bypass for dynamic vlan assignment but I couldn't even authenticate using ACS until now.Here is my config :Interface Config:switchport access vlan 47 switchport mode access dot1x mac-auth-bypass dot1x pae authe...

I have the following scenario:I require to set up a transparent firewall using a Cisco 1841 router with 2 Fast Ethernet interfaces with IOS version 12.4(15)T9 Advanced Security.The project also calls for authenticating users using the ip auth-proxy f...

Hi allRecently install ACS 5.0.0.21.8 and setup ACS for device Administration using TACACS+.Everything works as expected; ACS intergrated correctly with end points, local users can auth onto end point correctly though AAA.Debug on end points shows su...

The online help and PDF doc seem a little vague about the remote database feature....I'm wondering whether it will write the entire View database every time or just the new data?I notice the scheduled jobs is called Export which sounds like it might ...

HiI have an ACS 4.1. Recently my ACS encountered some problems i did a restoration from my server and users are unable to autheniticate. The failed authentication shows "Internal Error". There are no specific explaination on this error code. Did anyo...