Network Access Control

Hi I have ACS v4 and it has a replication server. My problem as follows.1) Due to some reason the ACS service on primary stop - how do I get to know the reason2)Also during this time the AAA requests are not going to my replication server - what can ...

The 4.2.0.124.6 is supposed to now support a Windows 2008 DC. I am able to install the remote agent software and the service starts up, etc. I can add the remote agent in ACS and it says that it is "available" etc. However, when I change the external...

Hi AllWe have ACS 3.3 and planned to upgrade to 4.2 - however when we installed 4.2 on our test system we found that an extra field was required in the TACACS set up for switches - within Network Configuration -> Network Device Groups -> AAA setup, t...

I am creating a lab environment to test 802.1x prior to implementing it into production. I wanted to know what is the pros and cons of this security feature at layer 2? How does it really work behind the scenes?The reason why i want to implement this...

Hi! I'm trying to auth my CA from my 880 cisco router, but get this message:"% Do you accept this certificate? [yes/no]: yesTrustpoint CA certificate accepted.%PKI-3-UNUSABLE_KEY_USAGE: Key-usage type 'Certificate-Signing' for cert with serial number...

Greetings,I am attempting to set up dot1x using the certificates on our CAC cards to authenticate. I have been able to set this up where when the smart card is inserted into the reader and after entering your PIN, the system will authenticate and let...

Hi,We have ACS appliance with this Application Versions :- Cisco Secure ACS : 4.1.3.12- Appliance Management Sofware : 4.1.3.12- Appliance Base Image : 4.1.1.4We must patch this appliance to 4.1.4.13.12Could you tell me if we can apply this patch wit...

Has anybody been able to change their credentials' password when AAA is done via TACACS and tagged to change their password at first login while accessing the network device through SSH?It works wonderful with telnet...

I want to authenticate telnet connections with TACACS +. This is my router configuration settings: aaa new-modelaaa authentication login telnetssh group tacacs+ enable local!aaa session-id commontacacs-server host 10.10.10.5tacacs-server host 10.10.1...

Hi Guys, we were hoping to resolve a vulnerability issue found in UCP version 4.0 that is fixed in version 4.2. Is it possible to upgrade only the UCP version and maintain the ACS version to 4.0? Or should we upgrade the ACS altogether?