Network Access Control

Hello,I'm currently working on a test implementation of Cisco NAC with McAfee.Everything works, the client is put into the right VLAN, etc.But unfortunately, every few minutes (it happens in all the VLANs so it's not a specific VLAN problem or so) th...

HAs anybody successfully deployed the new syslog feature to send messages to CS-MARS? I am able to syslog to the Cisco PIX Firewall syslog server (running on a workstation), but I have not been able to see the messages appear in CS-MARS. I followed...

Hi, in the 4.1 release notes the direct upgrade from 3.3.3 to 4.1 is allowed but I have 3.3.2: have you tested it ?I don't have 3.3.3 and I'd like to avoid 4.0 upgrade.thank yours

The installation and configuration guide for the ACS remote agent says that the remote agent is able to do user group membership verification. I have spent hours trying to find out how to do this.I have an ACS remote agent running on a domain control...

We are having conflicts with group membership in ACS due to using the same ID format for both Active Directory accounts and RSA tokens. We use the tokens for corporate wireless access - this account is then cached - then the same user will attempt to...

when Windows RAS using ACS as Radius server, after client authencation succeed, it will get error code: 742 as encryption problem.

Windows native 802.1x client sends the username to ACS in the following form "domain\user". I have created user names in ACS without the domain because we want users to be able to use the same login name when logging in to other applications which a...

Hi,I have a CiscoSecure ACS v2.6 for Windows 2000/NT running on my network, Recently we've bought the appliance CiscoSecure ACS Release 4.1(1) Build 23. Now, Can I migrate my database from ACS v2.6 for Windows 2000/NT to the appliance ACS Release 4.1...

Hi, in PEAP authentication, with ACS 3.3.2 and 12.3.(8) AP IOS, I receive only the username as login from advanced wireless software client, but from windows wireles client I receive DOMAIN\username format login and ACS doesn't strip the domain, stil...

I have a 3.0.2 ACS for Windows install and need to get to 3.0.4 before I can upgrade to the 3.3 license I have according to the release notes I found. Where can I find the old files to get me to 3.0.4 or higher so I can do an inplace upgrade? Or coul...

Hi,I have made a shared RAC where I defined the following RADIUS attributes:Tunnel-type: VLANTunnel-medium-type: 802Tunnel-Private-Group-ID: QuarantineVLANSo with this RAC I want to chance the VLAN from a user that is Quarantined.So in the NAP (Netwo...

is there anyway I can use a RADIUS server without enabling/using AAA.is there any command "ip auth radius ... " ?cudnt find anything on cisco as such.

HiI have a ACS 1113, it is running the following software:Cisco Secure ACS: 4.0.1.44Applicance Management Software: 4.0.1.44Applicance Base Image: 4.0.1.2CSA Build 4.0.1.543.2: (Patch: 4_0_1_543)What I was wondering what is the latest version/patch. ...

We're using CS ACS 3.3. We've been asked to change all of the TACACS+ keys for all of our switches (approximately 900+ devices).We can use CiscoWorks to change the keys on all of the devices, but is there any way to mass-change the TACACS+ key in th...