06-09-2008 06:50 AM - edited 02-21-2020 10:21 AM
I have a question about NAC & Windows Logon. I currently have a Cisco 3560 as the Network Access Device. Cisco ACS Solution Engine is running 4.1.1.23(3) for my ACS Server. I'm doing internal posture for Active Directory Auth, and External Posture for Trend Micro AV. Clients have the CTA + Supplicant installed.
When I logon to Windows upon booting up I'm placed into the quarantine vlan and on the NAD (3560) the log shows CiscoTrustAgent Not Detected. If I disconnect cable and plug back in, everything works fine...my posture comes back healthy, I'm authenticated, and placed into the correct VLAN.
Any idea why it is different first logging into windows versus plugging in after logging in?
Thank You,
Kevin
06-13-2008 05:57 AM
This looks like a misconfig. Better enable the logging function in CTA run the command âctalogd enableâ from the command
line.
06-13-2008 06:02 AM
I was able to fix the logon to windows issue by changed the timers on the switch for the 802.1x authentications, quit timer, and tx timer. Does this normally need changed from default?
Kevin
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: