Network Access Control

I have 10 devices and I want the administrative access to be authenticated agaist an ACS.There are 20 users who will be allowed to authenticate on them, but they must have different access like:User A access -> 1,5,8,9User B access -> 8,9,10And so on...

I have successfully configured 802.1x authentication on wired and wireless Lan. We have Cisco Switches, ACS SE and Windows AD.But i have one issue regarding the Single Sign on while authentication using the 802.1x with Windows Active directory the us...

Hi everybodyI have the ACS v3.3,it has a external user databases with several domains configurate with Active Directory, all domains can authenticate without problem, but only one can`t.How do I know if the AD replicate satisfactorily with my ACS?If ...

All,It is my understanding that the NAC can authenticate users via a back end Domain Controller. But is NAC able to to authenticate workstations?

I hope you had a good Christmas and New year. Can you help with this It is recommended to try and prevent Cisco Lightweight Access Points (LWAPs) from being able to associate with the Wireless LAN Controllers (WLCs) without some form of control or au...

Is there any way when logging into the ASA via an SSH session to change the TACACS password on the ASA itself, for instance, if the account on the ACS server has an expired password, or if its a new account and requires a change of pw upon first logi...

Hi..1. I'm deploying 802.1x on Wired environment and we are using ACS 4.2 with remote agent.2. For redundancy purpose, i install 2 ACS SE and 2 Remote Agent.3. The 1st Agent works perfectly with the AD. It can translate both machine and user authenti...

Hi There,I'm new Shell Command Authorization and I'm not sure if im doing this right.. I'd like to create an authorization set to limit a user so that they can only add and remove a single policy map to a specific interface.However, I'm having troubl...

I have a new ASA and I want to setup clientless VPN. I want to be able to authenticate it using my RSA device that uses key fobs for authentication. I've been browsing the forums and I see that you can do this using a MS IAS server to send the auth...

Hi,I would like to ask 1 question about machine based authentication on 802.1x.1.We are deploying 802.1x on wired user.2.Some user are using machine based authentication in order to authenticate their port.3.However, after the user password expired, ...

Hi, I want to know if I enable machine authentication using EAP-TLS, do I have to logoff or restart the pc which is the case for peap mschap v2 machine authentication?Also do I still need integration with AD?

I have a server Acs 3.3, and authentic via tacacs, through telnet. This is the configuration that i have in the routers: aaa authentication login default group tacacs+ local aaa authentication enable default group tacacs+ enable aaa authentication pp...

Hi,Could anyone please share a cisco document where it states that TACCCS+ cannot do user based authentication using MAC address but a radius server can .Thanks in advance Raj

Has anyone applied this patch?Any issues?thanksBob