Network Access Control

Hi, I have a new ACS 5.3 configure and a ASA5550 to authenticate VPN users using a remote LDAP server. Once I try to authenticate the users with the ACS it gives me the error message "22056 Subject not found in the applicable identity store(s)."I che...

I thought I would see if the community may a policy that works for the following. Configure concurrent mab and dot1x. So this is in the policy.  event session-started match-all    10 class always do-until-failure      10 authenticate using dot1x prio...

Hello guys,   I ran into an issue while testing deny access on ISE. I blacklisted the MAC Address that was used during the test. The DACL "deny all traffic" which is explicit deny was downloaded to the switch and remain static on the switch. after th...

Hello All,   May I ask when a port configured to host-mode multi-auth as there is another switch plugged into that port and have number of end devices. Does the dACL be valid in this situation to each end client?   Port configuration like this for re...

Hello. I would like to know how to add a second group radius with a second radius server on an L2TP server (cisco 3825) to separately authenticate routers arriving on a common VLAN. If possible, from the remote router, we should be able to choose the...

Hello Profiling experts,   I am busy reading through the profiling design guide and it's very detailed and useful.  I would probably have to re-read it a few times for it all to sink in.  The thing that I cannot understand is how one even gets to a p...

Hi All,   I have created a FTP repository and copied the ACS config backup ( ACS-Backup.gpg ) along with other ACS patches in the folder but when i am trying to access the repository then ACS-backup.gpg is not visible, rest all the files are visible....

We're having an issue since one of our partner organisations replaced their Aruba wireless controllers running ArubaOS 6.x with newer ones running ArubaOS 8.x. Prior to the change our users had no issues getting connected in their buildings but since...

Hi Team, Customer using 2.3P5 version, Currently it only supports single tenancy (ie. Single Admin group). Customer looking at migrating four different networks to this platform and there may be a requirement to have the different operational groups ...