Network Access Control

Hi,I have a scenario where I need to be able to allocate an IP address to a user group from a pool on the AAA server based on the AAA client that the user authenticates against. So for example if the user comes in on CPE1 they get assigned an address...

We are facing problems with ACS when we install SP1 on the ACS Server on Windows 2k3 Ent Edition.After SP1 is installed, ACS admin web interface hangs whenever a AAA client is added or NDG is added/deleted/modified.It hangs on some other changes as w...

I am trying to setup TACACS authentication on a Cisco switch. I want the primary method to use TACACS for authentication, and I want the local username that I define in the switch to take over authentication should the AAA server become unavailable. ...

Hi,Is there any solution to extend the validity time of self generated certificate on ACS, by default the validity is set for one year.As the server certificate on one of the ACS which is CA has expired and need to renew it.Is it possible only one ce...

Is there a deplyment guide available for this?

I have been trying to upgrade a secure ACS appliance to 4.1 and having issues. If I use the recovery CD TAC had me build it boots and lets me select " re-image hard drive" etc but I loose console access. If I watch the monitor the upgrade (ghost) see...

Hi all, Just loaded 4.0 but now require 4.1. I've tried ordering through the Product Upgrade tool but have had no emails nor have i had any confirmation when the order is arriving! could someone pls tell me how on erath i'm surpose to check it????? i...

Hello,with the standard Trust Agent, my NAC implementation works correct.However, when I use the Deployment Package Tool, for example to change my authentication to "Use Single Sign-on ..." and I put the XML-files into the correct folder, after reboo...

Hi,How to generate lost private key .pvk file on ACS which is also configured as CA Server, As I would like to register all the available ACS's Servers to CA Server using the same certificate from CA Server. Need a step wise procedure on obtaining ce...

Hi,I will have to describe our infrastructure if I want to explain ourproblem. In our network, we are running both Cisco IOS and Cisco IOS-XR.Every device is configured for RADIUS authentication and authorization(exec). This is the used configuratio...

In a Cisco Press publication "Troubleshooting Cisco Secure ACS on Windows" (http://www.ciscopress.com/articles/article.asp?p=474238&seqNum=6&rl=1), I read the following question:How can I disable the users' option to change the password by using Teln...

Hello together,I want to setup a user authentication for accessing services outside my ASA.For that I have an ASA (7.2) and a ACS (4.1.1.23.4) configured with RADIUS downloadable access lists.The authentication procedure works fine, the ASA gets the ...

Dear, I am trying to setup our new ACS server 4.1 but it isn't working . can any one help out?here is the output of the debug:.May 14 13:31:57.166: TPLUS(000000E2)/0/READ/82D3520C: timed out.May 14 13:31:57.166: TPLUS: Authentication start packet cre...