Network Access Control

HiI have been reading the threads on NAC, but only one of them was similar to my issue. Unfortunately, the suggestions in there did not work. Hence this post.SCENARIO: I am setting up a test lab for NAC deployment for one of our clients. I am usi...

Dear All, I have here in my company 25 Cisco Switch 3560 . as i know, i will configure the Switch with the Basic configuration like Hostname & IP-Address - & Gateway. My 2 question is :- 1- if i configure the switch with the Basic Configuration like ...

We have an issue where ACS denies Authentication because the RADIUS Session counter has been exceeded by the user, however the user has no active sessions with ACS.The only way to get the users authenticated is to Purge all Logged in users for that A...

Hi,In the show tacacs output, what is the meaning of the " /<number> " in the "Tacacs+ Server:" line ?.Thanks,Marcelo

I have installed ACS 3.3 on a WIN2k3 server, with the patches for 3.3.1. ACS opens ok on the server, but when I try to create an administrator account, I get "Errors on page" at the bottom left of the administrator screen, and I usually have to rest...

Hi,Would like to authenticate users who are trying to VPN interface being authenticated by ACS.Anyone have any sample of the PIX and ACS??Thanks.

We're running ACS 3.2(3)Build 11. We have setup CiscoWorks LMS 2.5 to authenticate via ACS. Also, user roles were created and are defined in ACS. However, when we perform replication to our backup ACS server, we don't see these components replicat...

I have machine and user auth working between Win2K PC and ACS 3.3 but not sure how to best use the Vlan assignment feature. I use Vlans for different departments and if I assign a vlan in ACS to a machine when it authenticates but the user is assigne...

I have a WLAN based on CISCO Aeronet equipments and WinXP station. I need to implement EAP-TTLS authentication, but ACS does not support this protocol. I have determined to implement other(no CISCO) RADIUS server, that is located in another country. ...

I'm trying to setup an 871 with 802.1x authentication for home users. The goal is to allow the employees corporate laptop and IP Phone to communicate across a VPN connection, but unauthenticated users should only be allowed internet access.Where I s...

Hi,I have ACS 3.2 with switches authenticating via 802.1x to it. BY Accident a switch ip got changed however users can still authenticate to it. I want to confirm this is normal as I understand the pre-shared key is the bit that secure mutial authent...

Hi all,is it documented the max number of request supported for ACS 3.3 appliance version?Our customer has two ACS (primary and secondary) and i see that pix (aaa client) sends a lot of request to the secondary one. AAA is used to authenticate and au...

Our application uses Cisco RHEL ((i386) 2.6.9-5.ELsmp) as OS. It relies on RHEL for tacacplus and radius capablities. (pam_tacplus.so & pam_tacplus.so are present in /lib/security on the RHEL box)Cisco ACS ver 3.3 is used to authenticate the users in...

We have a large block of userids we need to add to our ACS 3.3 Solution Engine into the CiscoSecure User Database. When using the web-based GUI, it looks like you can only add one user at a time. Is there anyway to add users as a block with some ty...