From: Amit Jain (netsteps@rediffmail.com)
Date: Thu Feb 03 2005 - 01:28:14 GMT-3
Dear Arthur
I didnot integrate ACS with Windows, but to tell you the truth,
my DOT1x setting could not properly authenticate even to internal user
database of ACS. First it did not ask for credentials when you plug your PC
but when it started doing it, then if the network connection to your PC flaps,
then ACS doesnt authenticate at all.
I reverted the changes and now waiting
for some better version of ACS or better command set for DOT1x that can sense
these problems.
I dont think TAC would help much
Amit
On Tue, 01 Feb 2005
alee@cccis.com wrote :
>Hi guys,
>
>I hate to post off-topic questions on this
group, but this is the last
>resort where I can get help from. Anyone is
doing Cisco 8021x
>authentication against Active Directory server over
Ethernet? I have Cisco
>6509 switches on the edge doing authentication
through Cisco ACS server
>which passes EAPOL to authentication Microsoft
Active Directory server. If
>the user account is in the AD server, then he is
allowed to login to
>domain; otherwise, he will be put into a guest VLAN.
>
>We have all kind of problems with it. Some users can't authenticate at
>all,
no attempt seen in the ACS log. Some users have intermittent problems
>while
some get into the guest VLAN even they have accounts in the AD
>server. I
open a case with Cisco, they have been working on it for half a
>year. Still
haven't identified the problem and found a solution. Tried to
>asked our
local rep to give me some reference who is doing same 802.1x
>authentication
like us, they came back saying they can't find one. Looks
>like we are the
pioneer! I can't believe it. If anyone is doing same
>authentication scheme
like my company, please share your experience with
>me. I will greatly
appreciate your help.
>
>
>
>Arthur Lee
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:16 GMT-3