Network Access Control

Resolved! How do I edit multiple groups in Secure ACS?

Say I have 20 or so user groups with in ACS and I want to modify one field in all of them (say I want to change the [3076\005] Primary-DNS field in all of them to have the same). Is there a way to do this in one shot (either through upload a txt usin...

Resolved! RA-VPN group-mapping with ASA

Dear All!I have a RA-VPN configuration with a Cisco VPNC and a Cisco Secure ACS 4.2. I do VPN tunnel-group mapping accordind to the user RADIUS attribute 25 class (ou=...), and it works fine. I migrated this solution from the VPNC to an ASA5520 with ...

Resolved! Cisco ACS with External DB - EAP-TLS

Hi Guys,I understand how the EAP-TLS exchange works (I think), but If I have a client (wireless or wired) that is using EAP-TLS with an ACS, can I confirm the following.Let say both user and computer certs are employed:1. Both Client and ACS perform ...

ACS Express 5.0 vs ACS 5.0

What's the difference between the two?- Cisco Secure ACS Express 5.0- Cisco Secure Access Control System 5.0

Configured Nacs- how to restrict AAA client access by specified Password

Hi alli hav given the below config in AAA Client& added the Client in User,Group, the NAR is configured for all Clients ,But my requirement is restrict AAA client access by specified Password aaa new-modelaaa group server tacacs+ NACS_Group1 server ...

Resolved! disable the telnet and enable password

Or remove them. Good morning. My goal is to one or two internal logins on each Cisco device and then allow Radius authentication for telnet or SSH? Is there a simple way to do this on a Cisco Device?ThanksDwane

LDAP query for VPN access

I have previously set up the Cisco ASA v7 to use LDAP to query Active Directory for dial in permissions. What is the earliest release this can be done in?, i.e. can it be done with PIX v6?

TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

We are running both ACS 4.1.1.23 on a Windows Server and Solution Engine as well and are facing same issues where in the command accounting doesn't work. Can anyone pls suggest a solution for the BUG ID : CSCsg97429.

Resolved! Upgrade package ACS SE 1111 3.3.3.11-K9

Hi:I have to upgrade an ACS SE 1111 from 3.2.3 to 3.3.3 version in order to upgrade again to 4.1.1 version. The problem is that the 3.3.3. version isn't in Download Software section. Where can i found it?.Many thanks,Francisco

Cisco ACS SE upgrade 4.1.1.23 to 4.1.4.

Need to upgrade Cisco ACS SE 1111 and 1112.Currently running platform 4.1.1.23.5 and need a to upgrade to 4.1.4.13.14Do I need an upgrade CD for 4.1.4.13 and the recovery Disk? If so do I need different version CDs for SE Hardware 1111 and 1112?If CD...

auth-fail vlan won't support re-authentication

We're using ACS 1113 Appliance with ACS version 4.1.4.13. via the RADIUS attributes, clients are re-authenticated every 16 hours. The machine cache is set to 12 hours. This means that, if the user doesn't log off within 16 hours, he will be denied ne...

ACS and Load Balancer

Hi,we want to rebuilt our design. In the future we want to have 4 ACS server behind a pair of load balancer. Does anybody knows whether the ASC server works with a load balancer.thanks for your answers.Torsten Waibel

TACACS not working in ASA 8.0(3)

We have quite a few ASA s with similar tacacs and crypto configs but yesterday we had issue with pix and we swapped pix with ASA 8.0(3) and tunnel is up and running but we are not able to login using tacacs even after the configs,, and i found a bug ...

Problem with Cisco ACS Replication

We recently encountered problems with the database replication of our ACS servers -- Server1 and Server2 (separate location). The last successful replication was last midnight of 02/22/2009 and started to fail at around 18:17 hours of the same date.H...

ACS 4.1 cannot set IP

i have reset the ACS Appliance, after that i cannot set the IP address. it return error when i try to set the IP address. any solution?

Network Access Control

Forum Posts

Resolved! How do I edit multiple groups in Secure ACS?

Resolved! RA-VPN group-mapping with ASA

Resolved! Cisco ACS with External DB - EAP-TLS

ACS Express 5.0 vs ACS 5.0

Configured Nacs- how to restrict AAA client access by specified Password

Resolved! disable the telnet and enable password

LDAP query for VPN access

TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

Resolved! Upgrade package ACS SE 1111 3.3.3.11-K9

Cisco ACS SE upgrade 4.1.1.23 to 4.1.4.

auth-fail vlan won't support re-authentication

ACS and Load Balancer

TACACS not working in ASA 8.0(3)

Problem with Cisco ACS Replication

ACS 4.1 cannot set IP

"Content is not allowed in prolog" via /admin/API/mnt/Session/UserName

Posture assessment report never finishing

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

PX Grid Connector and Service NOW

NTLM Disabled and ISE-PIC

Impact of Resetting ISE Context Visibility on Endpoint Connectivity

Cisco ISE posture for Wi-Fi is stuck on Action Needed

ISE pxGrid client/server certificate creation and renewal

not able to export scheduled reports to repository