Hello Everyone I would like you to please help me with the settings for integrating Cisco NAC solution with Microsoft System Center Configuration Manager (SCCM). I have understood that the NAC only integrates with WSUS but my client already made the migration to SCCM. there is any document to help me that the two solutions can coexist because otherwise the client plans to eliminate the Cisco NAC and place the Microsoft NAP solution. This implementation was done four years ago and consists of 2 NAC´s Managers and 2 NAC's Servers in failover, and configured in OOB VG about and has approximately 1400 users. Thanks in advance ... View more

Hello Everyone I have a solution of NAC implemented in version 4.8.1 in OOB VG L2 with two CAM's and two CAS's in failover integrated with an OpenLDAP for authenticating the users. The NAC has been stable for a while but I had porblemas some users after pass the authentication process on the CAA are moved into the Trusted vlan instead the access.Vlan. My Trusted Vlan is 800 and my Untrusted Vlan is 801. This behavior is random some users are working properly and others have this problem and both belong to the same roll and have the same attribute in the OpenLap. For troubleshooting I have reviewed the attributes in the LDAP to check if they are correct, I checked the mappings rules in the CAM and all is right. I really appreciate your help Thanks in advance Eduardo Navas ... View more

Hello everyone I am implementing a failover solution of NAC in OOB VG version 4.8, I have 2 CAS and 2 CAM. The Error I am getting is when I connect to both IP address and the FQDN of the CAS. =========== Network Error: Clean Access Server could not establish a secure connection to Clean Access Manager at camsrv3.cadivi.gob.ve. This could be due to one or more of the following reasons: 1) Clean Access Manager certificate has expired 2) Clean Access Manager certificate cannot be trusted or 3) Clean Access Manager cannot be reached. Please report this to your network administrator. ========== For the CAM's I use this names camsrv1 and camsrv2. then generate a CSR in the camsrv1 with the name camsrv3.mycompany.com corresponding  to virtual ip and it exported to camsrv2, Install the CA certificate of the company and everything works perfect. This is the failover configuration CAM: Primary:     10.1.206.248 camsrv1.mycompany.com Secondary: 10.1.206.249 camsrv2.mycompany.com Virtual:       10.1.206.250 camsrv3.mycompany.com Then I do exactly the same steps for the CAS's and this is the failover configuration: Primary:     10.1.216.248 cassrv1.mycompany.com Secondary: 10.1.216.249 cassrv2.mycompany.com Virtual:       10.1.216.250 cassrv3.mycompany.com Then I add the certificate of CAM in the CAS on the tab "Trusted Certificate Authorities"  and vice versa. The communication between all the CAM´s and CAS´s is correct (Primary, Secondary and Virtual). I can ping the IP and the FQDN and I can also manage the CAS through the CAM. I verify that the time was right in the CAM and the CAS and all good up there. Appreciate your help Eduardo Navas ... View more

I have a problem with the integration between CAS and OpenLDAP. The authentication works fine but the problem I have it when I try to do the assignment of roles to LDAP groups (Mapping Rules I Create a group called 49 in the OpenLDAP and I add a test user. then create a roll in the CAM to assign the test group to VLAN 49. I performed test creating mapping rules with these attributes and the result was negative Uid memberUid gidNumber Anyone know which is the attribute that I read in the OpenLDAP? In  another implementation thaht I perform with LDAP on Windows was very  simple because only create the groups in the LDAP and then put in the CAM will  verify the memberOf attribute and everything worked perfect. I appreciate your help Thank you in advance Eduardo Navas ... View more