Network Access Control

Hi, how are you??I have problems with same ACS 4.2 with Peap authentication. Not all but same machines does not authenticate. When you go to the Fail attemps in the ACS logs you can see this mesege "Authen session time out : Challenge not provided by...

Hi,we are having almost 150 NDG groups in my ACS Server, in that one group is specifically for Security devices like pix & ASA's.Now My requirement is that i want to Restrict this Security NDG group to one Specific Group under Group setup menu in ACS...

Hello.We have a Secure ACS 4.1 Solution Engine. I would like to use the Remote Agent CLI to export users but I don't understand how (or where) to launch the Remote Agent CLI. Does it run from one of our Remote Agent workstations? Any help would be gr...

HelloGot a windows AD with a Cisco ACS 4.2 setup infront of it.I have configured so that our firewalls (pix/asa) has AAA configuration now and it works well.But today when I was gonna configure our switches with the same login system i've encounterd ...

Basically I want to have two gateways configured in my ACS SE v4.2. Would it be possible?I'm doing this because I don't have routing capability to AAA all network devices in different subnets.Thank you

Hi,Is there a recommended patch level for ACS 4.2? I see a patch 4 and 5 can be downloaded. Any gotchas with either?thanksBob

I have configured client to gateway VPN's to authenticate with AD using Kerberos. What I am trying to do is get LDAP authorization to only allow members of a certain OU to log in. Is this possible by setting the DN to look at one folder and only allo...

I have a problem with ACS, I only want to give users access to gig1/0/1 but ACS matches 1/0/10, 1/0/11, 1/0/12...1/0/19 in my command set (the statement is set to permit GigabitEthernet 1/0/1). How do I tell it to match only 1/0/1 and nothing else?Th...

My customer wants to upgrade its ACS 2.6 to 4.2 without loosing its database. From the documetation I've found upgrade path: ACS 2.6 ---> ACS 3.x --> ACS 3.3.x -----> ACS 4.1.1.23 or ACS 4.1.1.24 ----> ACS 4.2However how could I get the old upgrade p...

Hi Guys,Can anyone confirm how TLS/SSL X.509 and PKI works. I have drafter the following from varios documents I have read and want to conffirm if this is in fact correct or is way off the mark? Wifi PC <---------------------------> Cisco ACSEnrolmen...

I have been able to successfully authenticate vpn connections with certificates from an ASA to ASA, and a pix to a pix. I am having problems though establishing a tunnel from an ASA to a pix 501. I was wondering if it is even possible to authenticate...

We just installed AnyConnect and want to use Active Directory to authenticate the users logging on to the network. I can create a user on the ASA and it downloads the software correctly. I can't seem to find the procedures to make it use Active Direc...

One problem I've had randomly come and go over the past two years occurs when I'm using Ubuntu Linux on my university's network. I log in through a web browser, and at some point between the next 20-30 seconds or so, I am redirected to the log-in scr...

Hi, I have configured AAA & 802.1X on my wired lan using MS IAS as the radius server. I'm trying to find if it is possible to find out from the IAS log file which slot and port the client authenicated is connected to.Is this possible?ThksThomas