Network Access Control

We currently have an active ACS (windows version) running version 3.3 and recently stood up a second server with version 3.4. I would like to replicate the users, groups and network devices from the 3.3 server to new 3.4 server. The plan is get the 3...

Hey guys...first post here. I have recently taken over our Cisco network (I am extrememly new to Cisco by the way) due to issues witht he outgoing manager. Anyway, we have a need for a single authentication process on our network. We are in a Windo...

Hi. We have developped a Posture Plugin Dll and an ACS server. The server part works well, but I can't have the CTA to load our DLL. Thus, our ACS server doesn't receive our VAF and the device is quarantined. I ran the ctastat.exe utility which tells...

Hi All,One of our NAS server, is using a default string for User-Password attribute value in the event that no password is set by the user in PAP authentication mode.How can we ignore that value or set it to Null under CAR in order to use the AllowNu...

Dear Sir,1. If ACS local database not found, ACS will attempted to authenticated with external database ( if configured ), and then created that user in ACS local database if authenticated succcess. Can we disable the auto create user function? 2. If...

Hi I have a pair of PIX 535's running 7.04 with ASDM 5.0(1) I have used the ASDM wizard which has setup three roles 1) ASDM_Admin (priv 15),2) ASDM_Readonly (priv 5)3) ASDM_Monitor (priv 3)The PIX now has these user accounts in the local database and...

Hello,I am currently deploying 802.1x using following devices:XP - HP Procurve - Cisco ACS - Active DirectoryI am able to forward dynamic vlan id to employe and consultant after authentication.Bit how to deal with big site having a large number of pe...

Win2003 active directory.I am planning to create a Windows security group (global) "WirelessUsers" and a group named "VPNUsers". Then I would need to go to ACS 3.3 and need to configure mapping to allow such groups to access wireless and VPN respecti...

Hi,I've just discovered an issue when trying to use MSFT supplicant and Cisco 802.1x accounting. This makes 802.1x accounting completely unusable.Facts:1. MSFT supplicant does not send EAPOL-Logoff messages and there's no way to enable this (btw. Aeg...

Hi,Can anyone confirm that command authorization works as advertised on the ASA platform? i.e. is anyone doing this successfully at the moment?We've no problems with authentication, accounting, NAR's, etc - just the authorization set's.thanks,Andrew.

Hi,I have a curious problem about radius authentication. I have a 4503 with radius enabled authenticating on ACS 4.0. For while I don?t enabled dot1x. I?m testing authentication throught telnet. I have a ACS 3.3 and a 4.0 and the problem happens with...

PIX515E (6.3.4). Attempting to request a certificate from a remote CA server. Entered this in the config... ca identity somewhere.net 54.254.254.54:81/cgi-bin ca configure somewhere.net ca 2 20 crloptionalWhen running the command 'ca authenticate som...

I am using a wireless setupAironet 1100, ACS 4.0, 3rd party Client adapterI am able to connect to my wireless network by keying in username&pass created on the ACS user setup. Also by using a self signed certificate from the ACS.Doubts: In ACS logs -...

Is it possible to restrict a user to a specific ip address via the acs appliance, running v3.3? I have a user that I want to allow but only want him sourcing from one address.

Attempting to configure SSL communications between ACS 3.2 and Oracle 10G OID LDAP. Anyone have pointers to any examples for this particular environment.We have verified SSL works via an LDAP browser but cannot get ACS to communicate via SSL. We h...