Cisco AAA/Identity/Nac :: ACS 4.0 Not Getting Authenticated With 2008 AD Server
Nov 8, 2011
I have a cisco ACS 4.0 build 27 on windows 2003 server . My site was working fine when i was having a AD on 2003 server . Recently i have migrated my AD servers is 2008 .
After the migration the ACS is not authenticating the users . Now i have made a server with 2003 and made the site working . I need a solution to make it work using 2008 server is there any compatiblity issue between ACS 4.0 and 2008 server .
View 1 Replies
ADVERTISEMENT
Aug 26, 2007
I tried to authenticate and authorized Nokia/checkpoint Nortel/AD3 and Nortel 5510 platform using an 4.1 for windows ACS. the ACCESS-REQUEST is well processed bi the radius server wich send ACCESS-ACCEPT to the AAA Client (ie NORTEL or NOKIA), but i'have got privilege access denied on the Client side. RADIUS IETF Dictionnary is used for every device. all others Cisco Devices authenticate and are well authorized.
View 3 Replies
View Related
Nov 21, 2011
I just setup ACS 4.2 on windows 2008 standard server. I noticed that after a while, i could not launch the ACS from desktop. All services are up, i have restarted server a couple of times....The Program appears to launch and the disappears..
View 2 Replies
View Related
Feb 28, 2010
Is there currently any ACS version working with Windows Server 2008 R2 domain controllers?Our server stuff has recently upgraded the Domain Controllers to 2008r2 and turned off the 2003 servers. This didn't make our ACS 4.1.4 really happy.I've read now serveral posts regarding issues with ACS and Server 2008r2 and hope to find a solution (besides switching to LDAP, yukk).
View 5 Replies
View Related
Jan 23, 2012
I´m currently looking for a document that specify how many MAC addresses can be stored and authenticated via an ACS (1120)? I prefer to use the internal identity store over AD or LDAP for MAB authentication for 802.1X project. I would like to know what is the impact on the ACS? CPU/MEM? What is the impact on the user authentication? delay, timeout, etc.
View 7 Replies
View Related
Aug 28, 2012
We have a customer which is using ISE with 802.1X in order to authenticate computers. All the computers have their own certificate and most of them can be authenticated fine! The issue is that some computers cannot be authenticated.The port configuration the authenticator (Cisco WS-C4510R+E IOS 151-1) are configured exactly the same: [code]
But for some reason some PC cannot be authenticated. A wireshark capture on the computer not working shows that the computer receives a EAP Request Identity and also send a Response Identity to the switch but then nothing happens more: So the process is stucked in the EAP-Response/identity. I attach a debug capture on the switch for one of the computer which cannot be authenticated.
View 4 Replies
View Related
Sep 1, 2011
I have 2 ASA 5520 (v. 8.21) in a active/standby fail over configuration.
VPN users are autenticated against the MS-AD through LDAP. For the most part this works well. Occasionally I'm having problems with new users in the AD. If I run a test I keep getting "User was not found". This can happen days after the account was created still. In some cases it never seems to work. The accounts I create exists on the same OU level as all the other accounts that are working.
View 2 Replies
View Related
Jan 3, 2012
I have an ASA 5510 with IOS 8.4. I want that only authenticated active directory users can pass the firewall.
View 3 Replies
View Related
Feb 12, 2012
Actually I have a lab with ACS 5.3 running with 802.1x, but when when the user is successfully authenticated, it's assigned and IP address from the DHCP server, is there a way to assign a static IP address depending of login username??
View 13 Replies
View Related
Feb 28, 2013
I'm trying to configure an ASA5510 with release 9.1(1) in order to authenticate VPN AnyConnect users through LDAP. In a first step the logs shiw me this kind of error:
[-2147483632] Session Start
[-2147483632] New request Session, context 0xadf415d4, reqType = Authentication
[-2147483632] Fiber started
[Code]......
View 0 Replies
View Related
Jan 22, 2012
802.1x is working properly, 802.1x port is up,but;when I do a remote desktop to machine that is 802.1x authenticated by an user(Wired), first, login to pc successfuly then(3 minutes) is switch port down..
Debug radius authentication
Debug aaa authentication
Does not appear in the log only message port is down
Equipment;
Cisco 2960, Cisco ACS 4.2 ,MS Active Directory Authentication
Client:windows xp, windows 7
Cisco 2960 Port Config
switchport mode access
dot1x pae authenticator
dot1x port-control auto
spanning-tree portfast
spanning-tree guard loop
View 1 Replies
View Related
May 6, 2012
[code]...
I am able to obtain IP addresses through the DHCP server for my clients and I am able to browse internet on the server 2k8.Server 2008 - Share Internet through DHCP server
View 10 Replies
View Related
Feb 11, 2011
I have install the administration toolpack on Windows 7 and enabled remote connections on my server 2008 box, When i try and connect with my Windows 7 server manager it does not work.I see stuff on google about enabling a trustedhost with winrm but can't find a way to do this.
View 18 Replies
View Related
Dec 14, 2010
I've been reading that the Windows Server Backup that is included with Server 08 R2 is pretty good. Is spending $400 on a third party utility worth it?
I'm asking because we're purchasing a new server soon and I want to know if the included backup is going to be good enough. Will be backing up server state as well as data to tape and possibly an off site server (server 2003) if I get my way.
View 19 Replies
View Related
Jul 13, 2011
I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4. When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows AD 2008 R1.
In ACS logs I am getting the this error- Authentication session timed out. Challenge not provided by client.
View 3 Replies
View Related
Apr 30, 2012
getting a cert off of a 2008 R2 CA and imported correct in to ACS 4.2? I've had and have seen other have the problem with creating a web server certificate from R2 (1024 bit) and putting it in ACS 4.2 only to have HTTPS/SSL no longer work correctly. I haven't even tested the intended purpose of the cert (EAP-TLS) yet, so who knows if that works. I've also seen through searching where some one was able to take a 2003 CA web server template and put it into R2 and it work, but I know longer have 2003 available?
View 1 Replies
View Related
Mar 1, 2011
I have installed the Cisco ACS 4.2 in a server running Windows 2003 Server, and this server is member server of the domain. The ACS is working whit a Wireless Platform 4400, and authenticating to the Wireless Users using PEAP and Digital Certificate. But now, the windows platform will be upgraded to Windows 2008. My doubt are the following:
1. The ACS running in a windows 2003 server, will authentificate users in the new windows 2008 domain?
2. At the beginning, the ACS and the Windows domain was 2003. Now whit the change of the version of windows domain, What happens whit the configuration of the acs server as member server? I need reconfigure the member server configuration in the ACS Server?
View 4 Replies
View Related
Jun 13, 2011
I have an ACS 5.1 and am trying to integrate with windows 2008 R1. The ACS has a valid AD account and indicates that its connected but when I try to list any directory groups my windows IE browser hangs?
View 2 Replies
View Related
Jan 2, 2011
Recently I've been working with the ACS 5.2 (Installed on VMWare). At the beginning I was using a Win Server 2003 Enterprise edition AD, and there was no problem with the AD and the CA Authority. Because some of my customers use Win Server 2008 I change the AD platform to Win Server 2008 Enterprise edition (x64).I don't really have a great experience with Win Server Platforms and, for what I've seen, the Win Server 2003 Services deployment is easier than the Win Server 2008 is.
So, when I used the Win server 2003 I could not only synchronize the ACS with the AD but also use some groups created on the AD to perform the Network Access Authentication. When I try to do the same with the Win Server 2008 AD the ACS and the Server get Synchronized but when I want to add the groups for the Authentication purposes there is no one, absolutely nothing... so I cannot do any test.Also I looked for information about the compatibility between the ACS 5.2 and the Win Server 2008 platforms and at the end the platforms are compatibles.
View 13 Replies
View Related
Sep 26, 2010
We are still running ACS 4.1 on Window 2003 server. We recently upgraded AD to 2008 although the domain and forest functional level are still 2003. After AD upgrade we now unable to authenticate via ACS Windows Database.
View 13 Replies
View Related
May 7, 2012
I have been doing a bit of reading on the ACS 4.2 remote agent compatibility with Windows 2008 R2, and it seems like the only way out is to upgrade the ACS to 5.2. We have Cisco ACS 4.2 SE and if I install the Remote agent on a Windows 2003 member server instead of the 2008 R2 DC.
View 3 Replies
View Related
Jul 17, 2012
We having difficulties with installing remote agent on windows 2008 R2 64-bit server and got the attached error.
Our ACS is 4.2.0.124 and remote agents we tried are :Remote-Agent-ACSse-win-v4.2.1.15-K9.zip and Acs-4.2.1.15.9-RA.zip.
[code]...
View 3 Replies
View Related
Feb 8, 2009
Does WCS 5.0 run on Windows 2008 Server. Does it run on a 32 or 64-bit OS? The WCS datasheet does specify that it can be easily installed on VMware Systems. Does it mean it can be virtualized.
View 6 Replies
View Related
Mar 7, 2013
I am running a small network of 30 pc. I have installed windows server 2003. Now i want to upgrade it to server 2008 but before that i want to test windows server 2008. That is why i,m looking online for a copy of windows server 2008 with reg key. Is there any good and trusted place to get windows server 2008.
View 1 Replies
View Related
Feb 26, 2013
So as far as I can tell our server is not running any AV whatsoever, so I'm buying Kaspersky Small Business with the 10 PC package:Kaspersky Small Office Security | Virus Protection | Kaspersky Lab to install on it and our other PCs, and I was wondering if there's anything I need to know about installing AV on a server.
View 19 Replies
View Related
Aug 13, 2012
I have a dedicated windows server 2008 r2 enterprise.I am running an SSTP VPN but only have 2 IP address to connect to the internet on.My issue is that one of the IPs is for the IIS7 etc and the other is for VPN use.How can I apply the same IP to more than one user allowing them to connect all at one.There are in total about 5 users who want to use the VPN service and I dont really want to pay.How do I apply the same IP to all accounts and allow them to connect and all use the same IP at once.
View 5 Replies
View Related
Jul 22, 2012
Still trying to get this XP pro SP3 to connect to or log into the server, a Windows 2008 jobber. I get the pop up that says unable to access the server, may be a permissions issue. I am administrator on both though and it should not be an issue plus I can ping each machine from the other. The XP machine does not show up in the network on the server though. The server shows up on the XP but then will not allow me to log into it. I changed all user names and pass codes on all the machines to be the same and it cleared up a number of issues except this one. The network name on the server is Network 2 and on another machine the network is named Network 3. Don't know what this means. This XP machine used to connect to the server without issues. My server guy moved away and well, I am just not that savy on 2008 Server. All the other machines are Windows 7. Oh yes, this is a work group with DHCP from a VPN and a Comcast (bless their souls) gateway.
View 2 Replies
View Related
Jul 5, 2012
I planned for my customer to replace his old LMS 4.0.1 server under Windows 2003 by a new server under Windows 2008 R2.Customer wants also to set a new LMS name and IP address for the new server under Windows 2008 R2 and keep both servers on the network.I'm wondering what could be the best procedure to do that migration.Can I used backup / restore procedure in that case ?If yes, what file must I modify to adapt the new LMS configuration to new hostname and IP Address ?
View 2 Replies
View Related
Feb 7, 2012
As always, I am trying to install LMS 4.1 on windows server 2008 R2 and after the installation and login to the LMS I find the following:DCRServer is down or may not be completely up. Check if the DCRServer process is running.And after some troubleshooting I found that the LMS is not creating the CMF database and the other databases.
1. I have downloaded the installation file from Cisco website twice, so I do not think it is the file that is corrupted, also it is only evaluation license.
2. I have met all the prerequisites and requirement as in the documentation guides, but maybe there is something still wrong.
View 17 Replies
View Related
Jun 23, 2011
We have bought lms 3.2 and window server 2008 r2 standard. Now we know, it cant be used together Could we upgrade to lms 4.0.1 ? If so, how can we do ?
View 2 Replies
View Related
Aug 24, 2011
net send command not available on server 2008
View 1 Replies
View Related
May 26, 2011
I have rolled out Terminal Services on Server 2008 R2 for a company I used to work for, it worked perfect the users could go home and browse to our web domain and login and use apps straight from the server.there'd be no Microsoft stuff to be accessed just pure Linux Servers but probarbly if users access the online terminal services on Linux they'd be using a Windows PC
View 1 Replies
View Related
Apr 19, 2011
Can I install win2008r2 standard to a 500gb usb ultra portable harddrive and connect it to my net book and run it ? I am studying for the MCITP and want to use it for that purpose?
View 3 Replies
View Related
