Network Access Control

We have ASA 5550, Steel-Belted Radius and Windows 2003 Active Directory. I am trying to setup so that the users can change the password when the password expires. We have over 1000 users.I setup "password-management password-expire-in-days 14" in ASA...

We have the Cisco Secure ACS v 3.2. There is a devices that we recently discovered is not added into the network configuration on the ACS. This device running IOS 12.2(29) does have all of the correct tacacs settings that should allow it to authentic...

I have a centralised ACS server running TACACS..I want to set up a proxy server in a customer network, so their routers request TACACS authentication from this server.However, I don't want any username/group details on this server, I want it to forwa...

I have setup wired 802.1x authentication using EAP-TLS with ACS 3.3 and backend link to Active Directory. Root CA certificates are installed on the ACS and Client PC. Machine certificates and user certificates are also installed on Client PC. A Serve...

Hi Community,I would like to know if it is possible to run acs 4.1 to authenticate alcatel pabx users. I authenticate the users on the 2950 cisco switch with acs 4.1 however i don't see in reports of acs 4.1, successful authentication?can you help me...

Hi,I am running version 4.1 of the ACS appliance and was wondering if anyone knew of a way to get around the limitation of the 1 year self signed certificate? We had no external CA infrastructure.Is there a way of creating the CA certificate on an ex...

Hi, we have been considering NAC for a while and have evaluated NAC Appliance. However, we have a requirement to use 802.1x for posture validation, authentication etc. I have looked at cisco trust agent and there is a statement about needing to be 'a...

Hello,We're running two ACS boxes (Release 4.1(4) Build 13 Patch 3). On of our boxes doesn't have the SNMP option available under Appliance Configuration, but our other does. Anyone know how to enable this? Thank you.John

Hi,I'm need to authenticate users authenticating either on a TACACS+ or a RADIUS server on a Dial-up line. The configuration that I'm using is:aaa authentication login TEST group radius group tacacs+ local-caseThe problem that I'm encountering is tha...

HiI have a solution where I am trying to implement which involves using ACS SE to authenticate against two AD domains. There is a two way trust relationship between the two domains. I can see both domains under the external user databases, however cu...

My task is to authenticate the users with the Active Directory of Windows 2003 using 802.1x method.I am successfully authenticated using 802.1x with ACS Local or Internal Database but unable to make the integration with Windows 2003 Server Active Dir...

I have a ACS server (3.3) and would like to authenticate to multiple AD domains that are not trusted together. I do have ACS 4.2 if needed. From what I understand it looks possible to do if you add the other AD domains as generic LDAP. If that is the...

On Console i m not ale to give static ip to it. As soon as the appliance reboots it enables DHCP & the configured static ip is lost. Details of Appliance is:Cisco Secure ACS: 4.1.1.23Appliance Management Software: 4.1.1.23Appliance Base Image: 4.1.1....

Hello people, I am having some problems test AAA authenitication.Here are the commands I have on the switch.username cisco password ciscoaa new-modelaaa authentication dot1x default-localdot1x system-auth-controlint fa 0/3switchport hostswitchport ac...