Network Access Control

I'd like to hear your thoughts on whether AAA services for device administration (routers, switches, etc) should be mixed with AAA services for user services (like 802.1x) on the same server(s), or whether you think it's best to separate the two func...

Hi!Does anybody have any success with Cisco SSC and EAP-FAST in the wired network? I'm going to use NAC, so I'm trying to set up EAP-FAST. I see the pop-up window on the client to enter user credentials and I see a lot of "debug radius" messages on m...

Hi, I am trying to configure "User Groups that are exempt from passing machine authentication:". I use this for 7921 users. I have tried that if I put the user in default group and exempt the default group, it works fine.But if I put the user in grou...

Hi,My setup is woking great with One ACS Server, If I have another ACS Server as secondary then what additional configuration required on the devices and what parameters required for time-outWith IE 6.0 / 7.0 the ACS Console gets hang, currently work...

is the "AAA server group tag" the same as the proxy distribution entry.trying to setup my asa for tacacs+cisco# aaa-server ? WORD < 17 char Enter a AAA server group tag

Greetings,We have been using our ACS appliance to authenticate logging into our Cisco gear. We have been using tacacs+ and it has worked fine but I am trying to set it up using radius. I basically changed on the configs on my test switch to radius ...

Hi Gurus,I have just installed ACS 4.0 and added Routers / Firewall / AP for authentication.ACS uses AD as exernal Database.AP uses 802.1x All seems to work-well, but want to restrict access to Firewall/Routers to a specific Active Directory Group an...

The ACS SE 1112 was running base image 3.3.1 with Management and Software versions 3.3.2.2. I upgraded the Maintenance and Software to 4.1.4.13 respectively. The main screen and features never changed. Rebooted. The GUI never changed. But, under the ...

I am a little lost and have burned a lot of time on URL filtering.Setup 1812 router, IOS 12.4(15) T3, SDM 2.4In Additional Tasks I have the URL list setup. The Allow Mode is on.For my zone pair (in-zone to out-zone) I have this URL filter being appli...

HelloI have Primary ACS in Datacenter-1 and would like to have Secondary-ACS in DataCenter2 in different geographical location.Is there any other prequisite apart from same hardware / same OS version / Same ACS version???Any recommendation for such a...

I've tried to configure the Radius settings, the same way I did on a catalyst 3560 (using commands inside "http:/IP_Address/exec"), but for some reason, even after an authentication list is created the Switch fails to fall back to the next method in ...

Couple weeks ago we need to move some ACS log files to another folder because volume was full where files are stored.I solved the space volume issue and moved back files to original folder.After that I can't see all files available at ACS Reports and...

Can I use the same ACS server for wired and wireless authentication to the same domain?