Network Access Control

Hi All,I am trying to implement 802.1x security on the network. I am tesiting on a switch on one of the ports with the following config conf taaa new-modelaaa authentication dot1x default group radius radius-server host x.x.x.x auth-port 1612 key rad...

Hello, I've not yet understood if with ACS 4.0 is possible to configure external database authentication using Generic LDAP to connect to Windows 2003 Server Active Directory.I spent more than 3 weeks searching for docs telling how to do this but not...

Hi, I have a problem with switch 2948 CatOS 6.x, i can?t enter to the device, the firts I was blocking in the router the address of tacacs server and then i used a local user but it doesn?t work.Username: tcomEnter PASSCODE:% Authentication failed.Us...

Hi,I have a probleme with a Cisco Secure ACS 4.0 Solution Engine (CSACSE-1113-K9).I try to power up the engine, but the light in the power button stay blinking all the time. Anyone have a idea why ?Last week, I boot it for the first time (It's brand ...

Hi guys,I am facing the following problem, while viewing the Windows database setting in Tacacs server. Screenshots attached for your reference.

Hi All,Just a quick note.. the auth-proxy prompt will accept html code if you want to tidy up the proxy login page a bit!Note: If you are using telnet auth too, telnet users will just see html code! - be warned You are limited to 254 chars though so ...

Hello,I'm currently working on a test implementation of Cisco NAC with McAfee.Everything works, the client is put into the right VLAN, etc.But unfortunately, every few minutes (it happens in all the VLANs so it's not a specific VLAN problem or so) th...

HAs anybody successfully deployed the new syslog feature to send messages to CS-MARS? I am able to syslog to the Cisco PIX Firewall syslog server (running on a workstation), but I have not been able to see the messages appear in CS-MARS. I followed t...

Hi, in the 4.1 release notes the direct upgrade from 3.3.3 to 4.1 is allowed but I have 3.3.2: have you tested it ?I don't have 3.3.3 and I'd like to avoid 4.0 upgrade.thank yours

The installation and configuration guide for the ACS remote agent says that the remote agent is able to do user group membership verification. I have spent hours trying to find out how to do this.I have an ACS remote agent running on a domain control...

We are having conflicts with group membership in ACS due to using the same ID format for both Active Directory accounts and RSA tokens. We use the tokens for corporate wireless access - this account is then cached - then the same user will attempt to...

when Windows RAS using ACS as Radius server, after client authencation succeed, it will get error code: 742 as encryption problem.

Windows native 802.1x client sends the username to ACS in the following form "domain\user". I have created user names in ACS without the domain because we want users to be able to use the same login name when logging in to other applications which ar...

Hi,I have a CiscoSecure ACS v2.6 for Windows 2000/NT running on my network, Recently we've bought the appliance CiscoSecure ACS Release 4.1(1) Build 23. Now, Can I migrate my database from ACS v2.6 for Windows 2000/NT to the appliance ACS Release 4.1...

Hi, in PEAP authentication, with ACS 3.3.2 and 12.3.(8) AP IOS, I receive only the username as login from advanced wireless software client, but from windows wireles client I receive DOMAIN\username format login and ACS doesn't strip the domain, stil...