Network Access Control

Hello,I have been recently trying to get the built in Windows XP supplicant to function in the following way: using EAPOL-MSCHAPv2 with Username/Password/Domain credentials at the Windows login screen. No certificates, just a pre-shared key between t...

Hi allI have recently moved from ACS V3.2 to V4.0 this has not been without it's challanges and has not been as seemless as I expected.The main issue we have is our 3rd party access from our Cisco 3000 VPN concentrator.The problem I am having is unde...

I am unable to ping the ACS solution engine 4.0 from my Win 2003 Server with AD installed. But the ACS can access and ping my Win 2003 server. I can also access the ACS Console using the same server through the browser on the 2002 port.Wat am i doing...

I have a client that currently has ACS for windows and RSA ACE server running on a redundant pair of servers. His ACS version is 3.x. My question is when we upgrade him to 4.1 is it recommended that ACS reside on its own pair of redundant servers or ...

Hey guys, I have a small confusion regarding assigning IP addresses and dynamic vlan assignment on the ACS soln engine. This is the first time i am configuring it. We have over 1000 users to be divided into 20 or more VLAN's and the location is sprea...

I just recently completed my CCNA and im not sure about which CISCO certification to do next..should i do CCNP or CCSP..I hear CCSP has about 5 modules,when taking them is there a specific way im supposed to take them or can they just be taken random...

I have the following configuration on a 2950 Catalyst switchaaa new-modelaaa group server radius radServserver 10.1.9.100 auth-port 1645 acct-port 1813server 10.1.8.100 auth-port 1645 acct-port 1813!aaa authentication login default group radServ loca...

When entering devices/routers now we use ssh with aaa enabled on devices in our LAN. Now we have MS IAS server and now try to decide how to make better/safe authentication. Shall we use local username or use MS AD to authenticate device users. How to...

Hi,I have a 3005AC and an Active Directory 2003 domain. I can VPN in but it seems security credentials from the PC are not being sent over the VPN.For instance, when I try to go to one of our servers shares, I have to enter my domain username and pas...

I'm having issues authenticating (MS-PEAP) a user in a MS Domain/Active Directory on W2K or W2003. I have installed the latest remote agent and the ACS sees the agent. I can define a local user to the ACS and authenticate with no problems. However, I...

The standard radius can not meet my need,I must know some private properties ,and could you tell me ?Thank you very much!!!

HelloCould you tell me if its possible to do 802.1X authentication with LDAP server using PEAP MS-CHAP v2 (Machine autentication) ?in fact, with Windows external database, its work fine.We use only machine authentication with vlan assignement over PE...

After making AAA changes on the catalyst 3750 the key configuration part was missed and the login attempt on the switch is getting failed now. There are no logs in the "failed attempts" on the ACS. What is the solution now?

We currently have an ACS server on a flat AD domain. We will be migrating users over to a different heirarchical AD domain. We want to be able to have our users authenticate to the existing ACS server while the migration takes place, regardless if th...

I'm trying to establish a wireless setup with 113x APs, ACS 4.0, using built-in XP support for PEAP using MSCHAPv2. Initially users are defined locally in ACS, but longterm is linking user groups with MS AD domains.My ACS has a RapidSLL (Geotrust) tr...