Network Access Control

Hi,When I tried configure enable level access per NGD, it doesn't work.Each time I see the same error:"TACACS+ Enable: Defining Max Privilige on a per network device group to be select".This error is the same if you don't select a NGD. ACSE ignores m...

Someone has a good guide for 802.1x with cisco ACS?

Can some one explain in detail on these commands.aaa authentication enable default group ACS enableaaa authorization exec default group ACS if-authenticated

when implementig a 802.1x with a cisco ACS is necesary to work with certificates or it can just work with username and password?

Hi,We are implementing the VPN 3015 Concentrator and using ACS to assign IPs to the VPN clients. Want to use 10.200.200.0/24 subnet as a pool, but I can not find the way to assign the right mask. I guess, the ACS detects that this is a class A networ...

I am currently working on an 802.1x pilot. I have successfully deployed certificates for PCs and users and I'm able to assign VLAN etc in a reliable fashion. I would like to enable MAC Authentication Bypass on the voice VLAN for IP phones. The proble...

Our ACS applies users to a VLAN by sending the attribute type 81. BUT the users need to connect to different vlans depending on the NAS. The NAP-feature with authorization (with a NAF for the depending NAS and a RAC for the different VLAN) changed se...

Hi,I'm doing a research on the Cisco NAC (without the appliance) concept and I would like to ask the following:1. Securing network access - Needed products are Cisco ACS and Cisco access devices (2960, for example). The feature needed is NAC Layer 2 ...

Is there a way to have redundant ACS's configured to email or notify in some manner when the primary fails and the secondary comes on line?

When we map AD group in ACS with ACS group it coming as AD group and * (As below “ ,* ” ) , Because of this * everybody is able to login irrespective of his AD group.Please suggest way to only add the NT Group alone without the *.

Anyone has experience for Deploy Vlan Dynamic using ACS 4.1What step by step i must configured in ACS, and how when Certicate Authority using CA Microsoft.

Hi everyone,I have an evil task do and I'm nearly despairing...Our customer has an Active Directory with several users, authenticating with ACS agains AD is no problem.The customer has access-device A which is for laptop-users and a mobilephone provi...

Hi All,We have around 1600 users in our Organisation those are spread across 4 different buildings which are connected through 45Mbps WAN links. We have to Implement a MAC address based authentication scheme for our users.I came across some of the co...

HiWhen I SSH to my ASA is there anyway to go straight to enable mode? We use RSA SecurID which means I have to wait for the token to change before I go into enable mode at the moment.ASA config:aaa authentication ssh console CISCO-ACS LOCALaaa authe...