considering: 1) commands do not create a user, but adds a user to an snmp-group 2) <username> is Name of the user on the host that connects to the agent.  do you also have a      user <username> password ..... statement  on the host that sends the snmp request? ... View more

consider using DOT1x authentication on the connected ports. (Cisco ISE, ACS. Radius etc) ports are unauthorized and have limited network access until a user/device authenticates and is (by ISE policies) assigned to the desired VLAN.   ... View more

using LDAP would be no problem   Multiple LDAP Instances You can create more than one LDAP instance in ACS 5.8. By creating more than one LDAP instance with different IP address or port settings, you can configure ACS to authenticate by using different LDAP servers or different databases on the same LDAP server. ... View more

just a little warning. " and will choose the best one to connect to " is true initially. but you have no control of roaming with autonomous access points, it is the client device that devices when to roam. the client device will try to keep the connection to the first ap as long as possible! if the client finds the original AP "good enough" it may decide NOT to roam, even when you stand near an AP with a much stronger signal. ... View more

then this image is not yet fully released for all customers (still under test) you need to contact cisco TAC to determine if this bug applies to your situation. They can provide you with the image. ... View more

here a document on a workgroup bridge using Cisco WLC   ... View more

you could run the software install command with the on-reboot switch and then schedule a reboot separately (reload at....) ?   reload [ /verify | /noverify ] [[ warm file ] [ line | in [ hhh : mm | mmm [ text ]] | at hh : mm [ day month ] [ text ]] | reason [ reason-string ] | cancel ] on-reboot (optional) Indicates that the user should not prompted to reload when the installation operation completes. The user must then use the reload command to boot the system with the newly installed packages. ... View more

found this: Joining ACS to an AD Domain You can join the ACS nodes from same deployment to different AD domains that has two way trust between each other. However, each node can be joined to a single AD domain. The policy definitions of those ACS nodes are not changed and that uses the same AD identity store.   indivudual nodes within a ACS deployment can join another domain within a trusted domain structure (AD). so this comes down to NO you cannot really join multiple AD's     ... View more

the documentation is not very clear. Note If multiple join operations are performed, multiple machine accounts are maintained inside ACS, one for each join operation.   (table 8-11) could mean you can join multiple AD, or it could mean it does not detect "allready joined" and joins again with a new created machine account   this link says 5.3 cannot!   ... View more

Hmmm... Not sure....  as this is about accessing Cisco information you might try the feedback button   ... View more

some remark: I had a similar issue where the problem occurred between offices in Europe and Africa. The Africa office had two providers, where the primary provider link latency was more than double the value of the backup! I did not succeed in making improvement, because both Europe and Africa provider said their configuration was in order. NB! as traffic incoming to the African country was censored, not purely routing was involved. It could be the censoring system runs out of resources.   I think you better contact Cisco directly to address the issue. ... View more

seems a boundary between two AS, both routers seem to lay in the Cisco network? 72.163.0.5 everse DNS (PTR) rcdn9-cd1-dmzbb-gw1-ten1-1.cisco.com 4.59.34.66 Reverse DNS (PTR) CISCO-SYSTE.edge5.Dallas3.Level3.net ... View more

as for the maps,  there is a new map-menu for use in 3.4, looks different, does the same using different interface (HTML5) deprecated means Cisco discourage the use of the old menu-item, but it is still available so if you cannot find your way in the new menu quick enough, you still can use the old, the changes will also be visible in the new interface. ... View more