Network Access Control

Greetings,We have been using our ACS appliance to authenticate logging into our Cisco gear. We have been using tacacs+ and it has worked fine but I am trying to set it up using radius. I basically changed on the configs on my test switch to radius wh...

Hi Gurus,I have just installed ACS 4.0 and added Routers / Firewall / AP for authentication.ACS uses AD as exernal Database.AP uses 802.1x All seems to work-well, but want to restrict access to Firewall/Routers to a specific Active Directory Group an...

The ACS SE 1112 was running base image 3.3.1 with Management and Software versions 3.3.2.2. I upgraded the Maintenance and Software to 4.1.4.13 respectively. The main screen and features never changed. Rebooted. The GUI never changed. But, under the ...

I am a little lost and have burned a lot of time on URL filtering.Setup 1812 router, IOS 12.4(15) T3, SDM 2.4In Additional Tasks I have the URL list setup. The Allow Mode is on.For my zone pair (in-zone to out-zone) I have this URL filter being appli...

HelloI have Primary ACS in Datacenter-1 and would like to have Secondary-ACS in DataCenter2 in different geographical location.Is there any other prequisite apart from same hardware / same OS version / Same ACS version???Any recommendation for such a...

I've tried to configure the Radius settings, the same way I did on a catalyst 3560 (using commands inside "http:/IP_Address/exec"), but for some reason, even after an authentication list is created the Switch fails to fall back to the next method in ...

Couple weeks ago we need to move some ACS log files to another folder because volume was full where files are stored.I solved the space volume issue and moved back files to original folder.After that I can't see all files available at ACS Reports and...

Can I use the same ACS server for wired and wireless authentication to the same domain?

Hi,I have the following config on a C10K:!aaa group server radius RADIUS_AUTH server 1.1.1.221 auth-port 8081 acct-port 8082 server 1.1.1.222 auth-port 8081 acct-port 8082!radius-server retransmit 2radius-server timeout 3radius-server deadtime 120!"r...

I didn't find the standard IETF attributes "135 Primary-DNS-Server" and "136 Secondary-DNS-Server" in any configuration screen. I need to provide this value to the my clients.Where can I find that? Thanks

Hi,ACS has local database and Active-Directory Database for VPN Users....Currently Aironet Access-point is acccessed via entering static password.. could like lan users to connect to access-point through ACS using Active Directory Database....Is this...

Using Microsoft PEAP 802.1x client on Windows XP SP2, if we enable machine authentication against a Windows Domain, the machine authentication is successful and the machine gets access to the network. However, when user logon occurs to the domain, co...

We are looking to have our cisco vpn client users authenticate to AD. We don't want to add the users in ACS but still point our ASA > ACS > AD. I.e, we don't want to add a new employee into ACS but still permit him to VPN (ACS)in and auth against AD....