ISE general questions: DOT1x, NAM, NAC etc...

Hello

I have two questions. One is a question that I am face and second is a probability I want to check

question: I have a stack of 3 switches: 2 x WS - C3850 - 48Pand 1 x WS-C3850 - 24 p, running IOS - XE 03.03.01SE. Now on some ports when I try to put the following commands, it gives me the output below.

authentication event fail following action method
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(config-if) #$tion event server dead action allow voice
action of death event authentication server allow voice
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # authentication host-mode multi-auth
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # authentication order dot1x mab
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # authentication priority dot1x mab
^
Invalid entry % detected at ' ^' marker.

Auto control of the port of authentication GCB2-FF-C1-SW1(Config-if) #.
^
Invalid entry % detected at ' ^' marker.

Periodic GCB2-FF-C1-SW1(Config-if) # authentication
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # timer authentication authenticate new server
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # breach authentication restrict
^
Invalid entry % detected at ' ^' marker.

MAB GCB2-FF-C1-SW1(Config-if) #.
^
Invalid entry % detected at ' ^' marker.

GCB2-FF-C1-SW1(Config-if) # dot1x EAP authenticator
^
Invalid entry % detected at ' ^' marker.

and in the same switch, I have some ports which have accepted these commands... I have not undrestand the injustice done to a single port.

any help will be appreciated.

now, to calculate the probability, I would like to check:

2: CAN WE HAVE A CISCO ANYCONNECT CONFIGURED ON THE WINDOWS COMPUTER AS A SUPPLIANT WHO SUPPORTS PEAP AND SMART CARD AT THE SAME TIME. SO IS THERE ARE SEVERAL USERS, SOMW WHO OPERATE SMARTCARD AND SOME GENERIC USERNAME AND PASSWORD ON THE MACHINE, TWO OF THEM COEXIST?

THANKS IN ADVANCE...

Nick...

You did make sure that these ports are actually defined as access ports before loading the config of dot1x?, it will fail on e.g. routed ports.

Tags: Cisco Security

Similar Questions

  • Smartphone Newbie question blackBerry - general question on the synchronization of e-mail

    Hello

    I have a general question about the synchronization of e-mail and BlackBerry smart phones.  Y at - it none of the devices that enable E-mail synchronization with Microsoft Exchange 2007 system not requiring BlackBerry Enterprise server?

    Thank you; Sorry if this has been asked before but I was unable to find it in the forums, documentation, etc.  Guess what I found for this kind of environment, you will use a BlackBerry Enterprise solution, but I can't assume.

    Thanks again.

    The short answer is no - BB using a different methodology than the use of WM. BB Push, WM uses (for most) sweater. As a result, the long answer...

    BB uses a server solution - it's called the BlackBerry Internet Service (BIS) and it is hosted by your carrier. As an ENCORE, you create a BIS account, then create configurations for different emails, save your credentials for each e-mail account with necessary configuration items (as an ENCORE) (name of the server, the special ports, etc.). Then, BIS periodically checks your mail servers (about every 15 minutes) for any changes on the server that are required on the BB - only, so it generates traffic to your BB to expel these changes. If there is nothing that need to come to the HH, there is no traffic on the network of the carrier.

    WM, on the other hand, devices use (for the most part - there are exceptions) a technology pull... the device itself asks your e-mail servers for changes that need to come to the HH. This generates more traffic on the network of the carrier that the action of the poll itself generates traffic, even if there is nothing to come to the HH.

    Another distinction is the notion of synchronization - in the vernacular WM, it means that what makes your Inbox to the server mailbox and your lines of mailbox HH of the each other for everything (items old and new)... In the vernacular of BB, what is happening is the reconciliation of the new features and changes. But the old elements aren't coming for BB... only news of the moment of activation.

    Another distinction is just what reconcile to a BB - new, remove, read/unread, saved, etc. Which varies according to the messaging service... see this KB for more information:

    • KB05133 Features of the BlackBerry Internet Service email reconciliation

    Hope that helps!

  • Some General Questions of CVI - how does the compiler

    Hello

    I work with CVI 9.1 for more then a year during this time i ' v noticed a couple things, I would like to help me to understand.

    1. Work with several C files:
    • When I'm writing a software that uses lets say C files and files of 10 H 10: Main.c Main.h File1.c File1.h Panels.h Panels.uir and so on... I'm implementation of the function in the c file and its deceleration of writing in the file h, i ' v noticed that sometimes I get msgs of the compiler on the conflicts, maybe there's a way I know not just for the CVI?
    • Works correctly with the file UIR for example lets take the files written above, if I have sign - HAND and control led1 and I want to do SetCtrlVal in the Main.c I can implement as this SetCtelVal(MAIN,MAIN_LED1,1); but when I go to file1.c and try to do it, I get the error message that main_led1 is not a control value (I included the Panels.h) this problem happens to me a lot is there a solution? or maybe I am doing something wrong...
    • What is the best way to implement bollean var (true false) for the software? is it possible to add this var always?
    • decelerations of incompatible type: allows you to take the Fmt function for example when I'm trying to use it in another file, I get the decelerations of incompatible type with the names of the files...
    • General question: lets say I want to include in my project and I want to use its features in main.c and file1.c, I included in two files? or there is a way to include it in a single file only?

    2. to access the buttons

    • lets say that I have buttons and I am pressing on it after pressing the button I have a loop for 10 min, I want to create a button give up, but I can't press anything because the keys are "locked out" is there a way besides multi threading to implement this?

    Wow! A very broad set of issues!

    A quick response.

    • Works correctly with the file UIR for example lets take the files written above, if I have sign - HAND and control led1 and I want to do SetCtrlVal in the Main.c I can implement as this SetCtelVal(MAIN,MAIN_LED1,1); but when I go to file1.c and try to do it, I get the error message that main_led1 is not a control value (I included the Panels.h) this problem happens to me a lot is there a solution? or maybe I am doing something wrong...

    There is a basic error in your statement: the first (SetCtrlVal) parameter must be the handle Panel, which is the reference to the object in memory that is created when you call LoadPanel (). Using the name of constant sign is not correct: it may work if you're lucky and you have the Panel handle with the same value as the name of the constant, but this certainly isn't the correct way to address on a panel controls.

    Even if I don't understand the error that you declare: I expect 'the control is not of the type expected by the function' or an error of inconsistent data type (like passing an int to double check) or...

    Remember that each function that processes objects on a Panel must be aware of the handful of Panel, then either you pass to the function as a parameter, or store it in a global variable.

    • decelerations of incompatible type: allows you to take the Fmt function for example when I'm trying to use it in another file, I get the decelerations of incompatible type with the names of the files...

    I normally leave CVI #including the necessary system files: when I use certain functions like Fmt in a source file and compile ICB warns me to add the relevant include file, and it does it correctly. Operating in this way I never had problems with formatting and the I/o library functions. You can rebuild the inclusion list by removing all #includes in yous source files and compilation of the project, this should correct errors

    • General question: lets say I want to include in my project and I want to use its features in main.c and file1.c, I included in two files? or there is a way to include it in a single file only?

    You must include the file containing the definitions of the functions in all source files that use. Or you can create a general include file with all included in your project and include only this one in all of your source files

    • lets say that I have buttons and I am pressing on it after pressing the button I have a loop for 10 min, I want to create a button give up, but I can't press anything because the keys are "locked out" is there a way besides multi threading to implement this?

    It is a general rule that animates the CVI environment: during the execution of a loop inside a function (a reminder of command or another function) the system does not handle the user interface events, so that your buttons appear locked. This can be solved by adding a call repeated (ProcessSystemEvents) inside the loop: this way of all UI events are monitored and managed by the system.

    You must use this method with caution: before entering the loop, you must disable all the controls that can be used during operation (normally only the Quit button should stay active) otherwise, you can enter a situation in which other callbacks are executed during the loop that might interfere with it.

    In such a case, do not put a reminder in the stop button and the use of a global variable I have normally create a toggle button Stop and manipulate it in this way:

    While (1) {}

    ....

    ProcessStemsEvents ();

    GetCtrlVal (panelHandle, PANEL_STOP, &stop);)

    If {(stop)

    ... gracefully out of the function

    break;

    }

    }

    This argument has been discussed several times in the forums: do a search for ProcessSystemEvents returns a large number of discussions you can read

    • What is the best way to implement bollean var (true false) for the software? is it possible to add this var always?

    CVI is not a native boolean value. I used to use an int and test weather it is zero or not

    • When I'm writing a software that uses lets say C files and files of 10 H 10: Main.c Main.h File1.c File1.h Panels.h Panels.uir and so on... I'm implementation of the function in the c file and its deceleration of writing in the file h, i ' v noticed that sometimes I get msgs of the compiler on the conflicts, maybe there's a way I know not just for the CVI?

    I do not understand what you describe: could you add some piece of code allowing to penetrate this situation and report exactly the message the compiler warns?

  • General questions about errors in eventvwr

    Greetings.

    I have a general question about some failed modules are stored in the Windows Event Viewer.

    An error leading to the crashes some applications that I've seen several times now when supporting computer problems is something like this:
    (Windows error reporting) Fault bucket, Type 0, name of the event: PCA2, (...) P1: application.exe, (...)

    I wonder what this 'PCA2. Which is a kind of module Windows handles tasks such as allocating memory or smth. Like this? What could be the cause of these errors (physical memory problems / corrupt swap file / insufficient rights?)

    Same Question for the application falls down because of "kernelbase.dll" as in:
    (Application error) Failing application: application.exe, Version: 0.0.0.0, (...) Failed module: KERNELBASE.dll, Version: 6.1.7601.18015, (...) Path of the failing module: C:\Windows\syswow64\KERNELBASE.dll (...)

    What is the .dll file and what could possibly cause kernelbase.dll Fault?

    The application can be a bit buggy, but I wonder what could possibly cause these accidents and if there is a way to fix these problems - or what dev did wrong.

    The two errors occur mainly on x 64 systems - especially Windows 7/vista

    Kind regards

    With application errors, the application is called everything first and the module he collaborated with is named second. Normally you should try to reinstall the application if you see not to repeat the mistakes. If this does not work, you go to the forum on the application to see if other users see the same error. There may be a bug in the application.

    The observer of the Application event log contains Information reports (event ID: 1001) for errors where the details were sent to Microsoft for review. You will find that there are corresponding to the event ID: 1000 reports errors, either in the system or Application logs. These reports are also included in the center of the Action. Center type action in the area of research above the Start button and press ENTER. Click on the arrow pointing downwards to the right of Maintenance, and then click view reliability history. The errors reported are the Red orbs with a white cross. You can search for solutions to problems, but occasionally you get a significant response from Microsoft.

    I can't tell you what it means PCA2. Google did not find a significant result. The reports themselves are not unintelligible, although I have never tried to understand the meaning of a particular report. I have extracted what, in my view, is a starting point of two reports:
    Event name: PCA2 = P1: motherboard_utility_onoffchargesetup.exe P2: 4.65.0.0

    Event name: PCA2 = P1: setup.exe P2: 11.0.0.28844

    You have the app in the boredom and the version of the file. These details have been extracted a file of information system to a computer with a card mother Gigabyte. So, you see I have a starting point, if I wanted to determine the cause of a failure.

    I will say before you go dive deep into each event ID: 1001 report that many are not easy to even begin to understand. However, they can provide useful clues.

    KERNELBASE.dll is likely to be the module with which the application works. You need to focus on the application.  KERNELBASE is probably preceded by P3 or P4 in the report?

    General remarks on the event viewer:
    http://www.gerryscomputertips.co.UK/syserrors5.htm

  • Very general question VMWare Workstation

    Hi all

    So I have a very general question of VMWare Workstation.  Here's the context: I am with a very small company and we do desktop for windows software.  My development computer running Windows7, and I have an XP Virtual Machine to the test on this platform.

    However, I would like to test the deployment and operation of my software on different versions of Windows 7, Vista, XP, etc.  However, our society cannot afford to spend $1000 on all versions of Windows, we can find.

    Are there operating system free everywhere (which is legal) images that are intended to be used by developers?  Or, you must purchase a full license for all of these operating systems, just to do a little testing?  How do you all your images of BONES?

    I know that this is a very general question (and not technology), but I would appreciate any input all have just general experience.

    Thank you!

    Dan

    MS offers subscriptions MSDN and Technet, containing all kinds of licenses for the use of test and development - according to the level.

    André

  • Convert an ID # name, address, etc.

    I'm working on a page of output that displays the orders. My calls to query on a field called ID # which is the primary key for a table called dealers.

    Here's my dilemma, I want to convert the ID to the real name, address, etc. of the donor to display on my page of output. I know how to run a query to do this, but my question is how to do this in a cfoutput to a different query. My page displays a query of exit grouped the two tables, or which is the table of merchants. How to insert has identification number converted within this output? You can activate a query output and off the Ford Center?

    That's because Orders_ID does not exist in your database

    schema.  It's an alias in your select clause and you

    not to use an alias in the Group By clause, you have

    to use the real table.fieldName, you want to order by.

    Another reason to use MS SQL, MySQL, etc.  They let you ORDER BY alias

  • Camileo load problem (solved) and a general question!

    Hi all!

    First of all, I was going to ask for help as to why the Camileo S10 wasn't supported (the orange light was not blinking) and I had seen a few people with similar problems.
    The solution?

    Give the contacts of the battery clean.
    The sticker of insulation that comes on it must leave some kind of residue on it, and just avoid the charges. [Now it blinks far fortunately:]

    So my general question was, is it possible/desirable to use the camera on the network?
    Instead of constantly drain and recharge the battery during long shoots, I prefer to leave it plugged!

    Thank you very much in advance!

    Paul

    Hello

    I think that the handling of the battery is always the same, regardless of what product it is
    From time to time the battery must be recalibrated.

    This means that the battery should be completely discharged and then after you need to load it again until the battery could reach 100%

    I do this with all my batteries; laptop battery, laptop battery and battery of digi cam.

  • A general question to the community

    I have a general question to the forum community. I noticed that many contributors have more than 100,000 points. I'm a contributor forum for several years, I consider myself to be a casual user and offer contributions to daily or occasionally and then my answer is chosen as the solution. Not that it's really important to me because I love just to help others. However, unless a person is right in front of their computer constantly on the communities of Apple I for the life of me see how a person could possibly reach more than 100 000 points. Y at - it a secret that I don't know?

    No, I think you worked which is the secret.

    TT2

  • Order General questioning of IEC 60870-5-104

    Dear all,

    I use the NI Communications toolkit to create slave IEC 60870-5-104 (station controlled).

    I use s/w of Triangel microworks part and use it as the master for the same. I am able to send and receive the bulk of orders with the examples provided with the Toolkit to "C:\Program NIUninstaller Instruments\LabVIEW 2012\examples\IEC60870-5,

    I am not able to find a way to capture the "questioning general command" from the server.

     

    Can someone help me how to proceed with this.

    Thank you.

    Hi Frabto,

    The development team has had some great insights below. I have bad informed you (sorry!) behavior, that the command general question should be processed automatically in the communication stack.

    First the order of query sent to control the station may request the complete(station interrogation) or a subset (group interview) of all the data points on the control station. NEITHER 60870-5 to the command station supports the command when the control station receives an order of questioning of the station, it will reply with all the values of the data points. If the Group interrogation command, it will reply with the values of the data points that belong to the group. Users are not able to detect whether the query command is received or not, is automatically handled inside the battery, it allows users of the VI called "Set Group.vi" inside the VI polymorphic "set Property.vi" to set a point to be one of the 16 groups and you can see the usage with the example 'Interrogate information in Group.vi objects' in the folder of the example 60870-5.

    You shouldn't need to do anything to respond to a command of the interrogation. The station will automatically answer. I hope that I did not cause you too much confusion on this point.

  • General question about the updates and version number

    I have a general question about versions and update.  I'm new on this and am in the deep end of learning I want.

    In vSphere web client, I see the following versions (these are exactly as the seller, he left a few months that I have screenshots in my documentation that match)

    Version - VMware ESXi, 5.1.0 1612806

    Profile - Dell (updated) ESXi - 5.1 - 799733 (A00)

    I am trying to familiarize themselves with the Update Manager and I noticed that there are a lot of patches and updates available.

    Lists of Update Manager 5 patches as "Missing" with Red x but directly above them are a list of patches with green tick indicating that "installed" - it is perhaps obvious, but im guessing 'installed' means really installed when displayed on the screen - there is an update installed, labeled "ESXI 5.1 all the update 2-' would be able to tell that it has been installed by the details of profile/version above?

    I don't think it's a big deal at this stage, but if I install all missing patches and then the details of the version/profile change in summary screen?

    I hope this makes sense.

    Thank you

    This article allows to correlate the updated version: products VMware correlating build numbers to update levels (1014508)

  • Is it possible to more a form letter to the recipients identified in a database (names, addresses, etc.)?

    Is it possible to more a form letter to make the process more product separate PDFs, one for each recipient identified in a database (names, addresses, etc.)?

    Or is - it possible to more type a letter so that the more process produces one big file that contains a copy of the form for each letter recipients identified in a database?

    Hi marceepoo,

    If you use Word for Windows, you can of course. See Adobe Acrobat X Pro * create PDFs from Word mail

    Best,

    Sara

  • General questions After Effects

    Hi all

    I have some general questions of After Effects:

    -J' bought some model videohive.net and when I open it, legacy projects

    converts them. It of quite OK, but is it the the ability to hide this message.

    -I'm a bit confused on "after effects multiprocessing. It took me about 3 hours to search the

    NET to know, that I still have no idea if I should active it or not. It comes to my computer:

    PhenomX4 955 (Quad Core) AMD

    8 GB RAM

    60 GB SSD

    Windows 7

    NVIDIA GTX 580

    Should I use multiprocessing? Currently my settings under "Memory & multiprocessing" are

    "Reserved for other applications of RAM: 1.5 GB" (available for AE 6, 5 GB)

    "Reserved for other applications processors: 0".

    "Allocation of RAM per CPU of background: 2GB.

    "Real CPU that will be used: 2.

    When I work in After Effects, I don't use other programs at the same time.

    In addition to these questions, I am very satisfied with this product!

    Probably not, but it depends on the plug-ins used in the project.

    For MP to work you need to at least 2 GB by heart, but you can not say what setteings are the best unless you try some different combinations. Set up a test project that is typical of your workflow that only lasts about 5 seconds. Try a few different settings about allocate 2 GB for each CPU (in the RAM available for the AE control). The interface is a little confusing, but here's a configuration that works on my laptop.

    Take a look at the RAM reserved for other applications, the CPU for other applications and the allocation of Ram per CPU background. I use as much ram as I can for AE but leaving a 1.5 GB for other applications. This leaves 6.5 GB available for Adobe applications. If I let 2GB for other applications and he leavs 6 Adobe which is right on the edge of breakdown 3 processors. If I put select 2 GB of Ram processor used actual distribution falls to 0 and make once we pass 01:17 by MP 2 minutes offshore. If I try to return all 4 cores my render time is the best time of 48 seconds at 58 with no other apps open. This represents an increase of about 20%. If I switch to another application while rendering with all 4 cores used to render times will at 01:48. Remember that the render time for my test with off multiprocessing computer is 01:17 so MP allows for most of the projects.

    I guess the point is that you should pay attention to what happens to the actual CPU used and run tests. As I said at the beginning, some effects are not aware of MP and allowing of multiple chassis treatment can slow down the system or cause a malfunction.

    I hope this helps.

  • Drive the General Question of the layout - Interface user - fields and color

    Can general question if possible to do or not, we do a field in color similar to the Red required fields?

    Change the color of text or field only is not supported by OnDemand now

  • Reimage ISE 1.1.4 on NAC 3355 Server Issues

    g ' Day All,

    I have problems with an ISE recreate the image of a server of the NAC 3355 currently. I successfully download the iso for 1.1.4 ise and it burned on a dvd, I went through the process of remiage, with all packages being installed successfully (or so it seems) there is no problem during the packages downloaded and installed from the DVD.

    My question is, when the box reboots and I am introduced to the login prompt where I can type "setup" to launch the initial config script, I can enter all relevant details and the system displays the network interface, pings the default gateway and the server names with success (I don't see any errors that the pings have failed) and it seems to start installing the ISE.

    I get the screen message on does not use 'Ctrl C from this point', then I see the "installing applications...." "on the message screen, but rather than see the 'ISE installation' on the message of the screen as detailed in the installation guide hardware 1.1.x my install goes straight to the screen message"generating configurations"then restarts the box.

    Once reboot the box, I can not connect with the name of username/password combo that I entered in the initial configuration script, but I get no more on the screen messages or prompts to create a password database, etc.. I only get the cli command prompt. I am able to navigate the fine cli, I can ping the gateway and nameservers of the CLI fine, but if I apply for a show, he comes back with nothing. If I make a request to configure ise, the cli says that EHT is not installed.

    Help Please guys.

    See you soon,.

    MSI

    Please keep this thread updated to date.

    Jatin kone

  • How to remove incorrect information in the box pop up that appears when I fill out my name, address, etc.

    Is it possible to modify or delete incorrect information, as wds. has kept in the pop-up box that appears with suggestions for me to use when

    filling in my name, address, e-mail our etc. in web pages.

    Hello

    Welcome to the Microsoft community.

    I understand that you want to remove incorrect information stored in the AutoComplete feature in Windows 7.

    I will definitely help you with this.

    1. which web browser you are using?

    If you are using Internet Explorer Please refer to the link.

    http://answers.Microsoft.com/en-us/IE/Forum/IE8-windows_other/IE-AutoComplete/334f28ff-BA97-4d38-B2B8-fddec6cced85

    Reference link:

    Delete AutoComplete saved information

    http://Windows.Microsoft.com/en-in/Windows7/delete-AutoComplete-saved-information

    Hope it will be useful. If you still have questions, please reply and we will be happy to help you.

Maybe you are looking for

  • Mozilla Guard put my e-mail to lowercase

    Mozilla Guard put my e-mail to lowercase when I need first letter capitalized

  • Precise timestamp on the graph of the band with scrolling

    I have a user interface with a set of synchronized graphics that operate in mode scrolling stripchart.  The elevator of the x-axis is visible on one of the cards, and the operator has the ability to take a break from the update of this table (essenti

  • To extract data from a file previously misspelled

    I am trying to extract two tables of a previously written file, which contains two tables, separated by a tank/t. Files are saved in this format; Wavelength (nm)ower (W): * lambda1 * power1 *. * lambda2 * power2 *. ... ' lambda # "and" power # ' are

  • Upgrade HP Pavilion 15 Msata

    Hello. I bought a laptop HP pavilion 15 n0004eh in 2013. I would like to know if I can put the MSATA SSD in my notebook, next to the 1 TB HARD drive. Specifications: Intel® Core™ i5 4200U, 8 GB memory 1600 Mhz, GeForce GT 740 M, 1 TB HARD drive http:

  • Code 80070422 and 641 of the Code

    My windows update service is not running.  I received the above codes when you try to complete the update, but the computer will not complete the update. Someone knows how to solve this problem