Hi Collin, The 4.9.1 Patch for Windows 8 Support can be downloaded from the following link : http://www.cisco.com/cisco/software/release.html?mdfid=282910502&flowid=34713&softwareid=282573326&release=4.9.1&relind=AVAILABLE&rellifecycle=&reltype=latest The patch should be applied to both 4.9.1 CAM and CAS. Please go through the README file for patch provided in the download link provided above. It has detailed information. Regards, Karthik Chandran ... View more

Hi Syed, 1) Confirm whether users are logged in using their domain account and not using the local account. 2) Confirm if CAS is listening on port 8910. You can take a sniffer trace on the client pc which can help you. 3) Synchronize the time in the CAS/Agent with the AD. If the issue persists, I would suggest you to collect the agent logs, cas logs and wireshark capture (from the user machine while it tries to authenticate) and create a case with Cisco TAC. Regards, Karthik Chandran ... View more

Hi Subodh, I understand that you are trying to use command authorization using RADIUS. aaa authorization commands 15 default group radius if-authenticated local Command authorization is not supported in RADIUS. RADIUS does not allow users to control which commands can be executed       on a router and which cannot. Please refer the following link: http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a0080094e99.shtml You need to use TACACS+ for configuring command authorization for IOS and PIX/ASA. Regards, Karthik Chandran *kindly rate helpful post* ... View more

Hi Matthew, Please let me know what is the EAP method you are using ? (For eg; PEAP with EAP-MS-CHAPv2 .). The backend RADIUS server logs should have hint on why the 802.1x failed. If you are using PEAP with EAP-MSCHAPv2, 1)  make sure whether the certificate on the RADIUS server is fine. 2) check the config in the RADIUS server (reg what EAP methods are allowed ) and check the settings in the supplicant. 3) Make sure that the CA certificate of the RADIUS server is trusted in the supplicant. 4) Check the RADIUS server logs and the logs should give a hint regarding the issue. If needed, create a case with the respective RADIUS server vendor's TAC. Regards, Karthik Chandran ... View more

Hi, Cisco ACS 1113 appliance doesn't support ACS 5.x version. 1113 appliance supports till ACS 4.2.1 version. Cisco ACS SE 1120/1121 appliance models are required for ACS 5.x The upgrade path for ACS 4.1 to 4.2.1 version can be found in the following link : http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2.1/Installation_Guide/solution_engine/upgap.html#wp1237189 Regards, Karthik Chandran *kindly rate helpful post* ... View more

Hi Jeff, If you use the command, "server-private key 7 " command, then the string that is entered is considered to be encrypted text. If no number or 0 is entered, the string that is entered is considered to be plain text. So if you are planning to enter your shared secret in plain text, try using the command "server-private key 0 " or "server-private key ". If after entering the shared secret in plain text (using the 0 or no number) and if you are facing issue in authentication, then check the failed attempts logs in the tacacs+ server which should give you the hint of the issue. ... View more

Hi Yannick, Cisco ACS 4.x version doesn't support Windows authentication (External User Databases > Windows Database) to Windows 2008, R2. ... View more

Hi, The RADIUS server would authenticate the requests coming from the AAA clients  that are configured in the RADIUS server. If an authentication request comes from a AAA client that is not configured in the RADIUS server, then the RADIUS server would reject it. 1) Please check whether you  have added the AAA client/NAS IP address (your ASA's IP address) in your RADIUS server and configured the same shared that is configured for the AAA server in your ASA? Also you can check the logs in the RADIUS server and it should give information regarding the issue. If you take a packet capture and can filter for radius keyword you can get more information regarding the issue. ... View more