NAC agent the wireless runs whenever we have controllers

Hello everyone, we have a problem in our environment and wanted to inquire about this. We have a Cisco wireless infrastructure in place - 5508 2 controllers and about 200 3502 AP we have split the AP evenly between 2 controllers. We backend system with an own server in the strip of the NAC device for post assesment. What we are seeing, is that when a user "passes" a point of access to the other, and if the AP is connected to 2 separate controllers, the NAC agent will take place once again. Newspapers in cam supports this, as we see the user is disconnected and then reconnected. We have 2 controllers configured in a mobility group which should allow roaming. So what would be the expected behavior? Is the controller always send RADIUS Accounting Stop packets to the CAs when it tends a session wireless to another controller, even if they are in a group of mobility?  Any help or thoughts would be appreciated.

Thank you

The f

Jeff,

Since you're using dot1x, I found the following note in the configuration guide for mobility:

http://www.Cisco.com/en/us/docs/wireless/controller/7.2/configuration/guide/cg_mobility.html

All clients configured with 802. full authentication is complete by 1 security X/Wi-Fi Protected Access (WPA) to conform to the IEEE standard.

Your radius server that you see a second authentication attempt from the second controller? If Yes, then most likely, this is because of the management of accounts radius stop and start messages while roaming.

Thank you

Tarik Admani
* Please note the useful messages *.

Tags: Cisco Security

Similar Questions

  • I have a toshiba laptop purchased recently. After the scheduled updates it does not recognize the wireless network. I have to do a system restore. is there a solution for this problem?

    I have a toshiba laptop purchased recently.  After the scheduled updates it does not recognize the wireless network. I have to do a system restore.  is there a solution for this problem?

    Hello

    Make sure you have the latest network adapter drivers fron toshiba

    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/home.jsp

    and if windows update is at the origin of the problem change how to get updates to uncover the problem update

    When you have found the issue, a right click on it then invited uac then hide

    read the information on the link below

    http://www.bleepingcomputer.com/tutorials/tutorial140.html

    Download updates but let me choose whether to install them - if you select this option, Windows will download the updates on your computer, but not install them automatically. If you want to install updates, then you must install them manually. You should only select this option if you have a reason to not install updates automatically. Only advanced users should use this option.

    Check for updates but let me choose whether to download and install them - if you select this option, you'll be alerted when there are new updates available for download and install. You can then choose to download and install the updates that you want. This option should really be reserved for people who know exactly which updates they need, or those who have little access to the Internet.

  • I used a password reset disk to access the Password Wizard, whenever I have propose a new password, it gives the error message

    I used a password reset disk to access the Password Wizard, whenever I have propose a new password, it gives the error message "" an error occurred while the wizard attempted to set the password for this user account". I can't pass this screen and am virtually blocked the computer phone iam trying to access. What can I do? It comes to Windowns 7 Home Premium

    This probably means that your password disk drive is not up-to-date. Here are the other options built into Windows to help you get out of this situation:

    • Restart the computer with your Windows repair CD, then use system restore to set Windows in a few days (only works if you have recently changed the password).
    • Log on to your account admin to spare, and then reset the password for your existing account (works only if you set up an alternative admin account).
    • Log in as administrator mode without failure, then reset the password for your existing account (the password is usually empty).
    • Use the password indicator (only works if an indicator was created and if it's good enough to allow you to guess the password)
    • Check your paper files (works only if you threw down the password somewhere)
  • HP deskjet 6840 undetected on the wireless network after you have added the new wireless router.

    Belkin Wireless Router unfounded, implemented with WEP security, is dead. Replaced by Belkin new value WPA/WPA2 security is enabled.

    I can connect ok with USB, but I don't know how to re - enable wireless printing.

    Can anyone help?

    Hello

    To connect the printer to the network, you will need to use the PC. tehrefore knowing what OS you use will allow you to direct you better.

    If you are using Windows 7, you need to connect the printer with an Ethernet connection first, then enter the pritner EWS page to configure the wireless connection.

    You can find the exact measurements below:

    http://support.HP.com/us-en/document/c01943577

    For Windows XP or Vista, please follow the steps below to connect the pritner to your wireless network:

    http://support.HP.com/us-en/document/c01835115

    Kind regards

    Shlomi

  • Why the time & date that sits on the computer change whenever I have Vista premium edition reboot.using

    original title: why the time & date that sits on the computer change every time I have Vista premium edition reboot.using

    Larson

    Larson

    Make sure you set your time in the right time zone.
    Right-click in the time at the bottom right > set date/time > time zone

    If this isn't the problem, then...

    You probably need a rew CMOS battery.

    How to replace the CMOS battery
    http://www.computerhope.com/issues/ch000239.htm

    CMOS battery
    http://murfsgarage.cybertechhelp.com/CMOS.htm

    ATTENTION: while the battery itself is very good cheap, be careful if you decide to replace yourself.
    It is better to have another friend who knows also computer be with you together.

    The safest way is to pay the Department store. But it will cost you.
    Your call.

  • Since the last update, whenever I have multiple windows or tabs open for more than 10 minutes, Firefox slows down to a crawl or stops responding completely.

    no further details

    It is possible that your security (firewall, antivirus) software blocks or limit Firefox or the process of plugin-container without you inform, possibly after the detection of changes (update) for the Firefox program.

    Delete all rules for Firefox and the plugin-container in the permissions list in the firewall and leave your firewall again ask permission get full and unrestricted, access to the internet for Firefox and the plugin-container and the update process.

    See:

  • The popup NAC agent

    Dear,

    I have two devices ISE installed in a distributed deployment ("ISE1' primary and secondary"ISE2"), each node has three personas installed on it. The servers are recorded together and replication is working properly between nodes.

    When we work on the first node, all right, if I try to unplug it from ISE1 and do my tests on ISE2, the cisco NAC agent don't popup, unless I have to uninstall and reinstall again the ISE2. Then it will not work properly.

    Note: the version of the agent of the NAC is the following: nacagent - 4.9.0.37.

    Any idea?

    Concerning

    Zahi

    I don't have access to an ISE at the moment to find, but try this:

    Policy > policy elements > results > customer Provisioning > resources

    Edit profile, and there should be a box of discovery host.

    My apologies, I guess a little without access to the box, but it is certainly configurable, you don't have to add it manually.

  • I have windows 7 and I forgot the administrator password. whenever I boot windows 7, he asked the password to log in. Unfortunately, I forgot. What should do?

    I forgot the administrator password. I am not able to connect to windows. It is said: ' have you you forgot the password? "whenever I have try to connect.

    Hi mayur_codemaster,

    Thank you for visiting the website of Microsoft Windows Vista Community. Microsoft technical support engineers cannot help you recover the passwords of the files and Microsoft who are lost or forgotten product features

    For more information about the lost passwords, please see the following Knowledge Base Article:

    http://support.Microsoft.com/kb/189126

    Thank you, and in what concerns:
    Ajay k Microsoft support

    Visit our http://social.answers.microsoft.com/Forums/en-US/answersfeedback/threads/ Microsoft answers feedback Forum and let us know what you think.

  • Strangest thing: iPhones can't see the wireless network. Why not?

    Suddenly, an iPhone 5 and an iPhone 6 were not connected to the home network. I thought that the wireless router was to have a hiccup. Reset it and still no. Control a connected computer and internet. Thought that it was a wireless problem, but check the settings (I don't mess with) and they are fine. BUT, I realized my iPad is always connected to the network. IPhones don't even see the wireless network. SSID always broadcast on. I tried to enter the SSID and password manually, but iPhones say that the network does not exist. It's the strangest thing. What would make the invisible network for phones all of a sudden? Both phones are differnet OS running. One is the latest version, probably the previous version. It's a FiOS Actiontec router/router wireless. Everyone has heard of such a thing? I do not understand how it is possible...

    Try this on an iPhone. No matter which even with other iOS.

    Tap settings > general > reset > reset network settings

    You will need to enter the password for Wi - Fi.

  • Satellite L875-13D - problem with the installation of the wireless card

    Hello

    I bought a Toshiba Satellite L875-13D. I installed Windows 7 Enterprise edition.

    I have a problem with the installation of the wireless card. I have downloaded the driver on Toshiba website, but it does not work. When I run the file .zip and .exe, nothing happens. In addition, there are several pilots: Athos, Intel and Realtek and I do not know what is mine... I test all the driver but same result.

    I have the same problem with Bluetooth driver that does not work too.

    Thank you for your help.

    > But it does not work yet for Bluetooth,... I have install the driver by the .exe from the Toshiba Web site but when I run the application, I have error that says missing tosbtapi.dll. I founded and downloaded and installed on budget3 and SysWOW. But after that, the installation is blocked. Any ideas?

    Laptop Satellite L875-13D isn t equipped with Bluetooth.
    Didn t you know who?

  • Update the wireless LAN, satellite 5200 701

    Hello
    I have laptop Satellite S5200-701 and it has built in Bluetooth (PA3121U_1BTM), also wireless device evolving as written in the book loads. Now I want to move the wireless LAN and I have this tip:

    I need to change my Bluetooth device with another which has two facilities (Bluetooth & Wi Fi) or I need to upgrade the software only?

    If necessary to use the different device, how this device connects to my note and what is the serial number?

    Hello

    You re right. The laptop is scalable WLan. As Lucky has already said you need a card WLan minPCI like this:
    PA3212U-1MPC wireless LAN card

    At the bottom of the unit, you should find a cache location WLan, which is fixed with a screw.
    Here, you can connect the minPCI wireless network card to the Board of Directors. 2 cables must be connected as follows:
    White HAND and the black cable to THE

    PS: You can switch between BT and WLan with FN + F8

  • NAC Depolyment for wireless network

    Hi all

    I intend to implement a NAC appliance server in one of our customers. The wired LAN is based on cisco catalyst switches and it's going to be a wireless LAN with a LAN Controller wireless and about 25 points of access (all Cisco equipment). I plan and deployment of virtual tape gateway and I wolud would like to know if it is possible to control the wired LAN and the network wireless with the same server of NAC CASE or if I need a server of the NAC for the wireless and another for the wired network local.

    Concerning

    Vicente,

    You can as long as the wireless is adjacent L2, you can use the same CASE for OOB wired and wireless.

    HTH,

    Faisal

    --

    If you find this article useful, please note so that others can easily find the answer

  • Name of the wireless connection

    I reset my router to the default settings, and I noticed that my network name changed "DS912" to "DS912 2" How do I remove the number at the end of the name of my network? It always seems to happen whenever I have reset my router and the name of the network follows the number sequence whenever I have reset my router or I reinstall or install a new OS.

    I'm not aware of any approved method (or other) in order to avoid the consecutive numbering of the networks and I really don't see why it should be a problem. If I was forced to deal with it, then I create a restore point, and then delete all unwanted network names registry and duck for cover. Maybe it will work, maybe it won't, maybe he will have unexpected side effects.

  • I'm having a problem with my wireless connection. I have to keep in with zero wireless configuration to connect to the internet almost whenever I start the computer. I use downgrade XP on vista.

    I'm having a problem with my wireless connection. I have to keep in with zero wireless configuration to connect to the internet almost whenever I start the computer. Usually, you must configure only once and his game, but I have to keep on my new Dell Precision 6400 reconfigure it. I use downgrade XP on vista.

    Hi Susancav,

    Welcome to Microsoft Windows Forums!

    I'll be your message to the category of xp windows for a better answer. You can always find your message by going to my Threads in the section My Forum links at the top right of the page. http://www.Microsoft.com/windowsxp/expertzone/newsgroups.mspx

    Thank you and best regards,

    Bindu S - MICROSOFT SUPPORT
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • The NAC Agent running application scan

    Ladies and gentlemen,

    My client is to be on ISE PoC. They want to test the functionality of Posture to run the application.

    I would like to ask: what is the NAC agent scan interval. If I want to use Agent NAC to scan the PC, an illegal demand, but initially, during the connection, the application is not running. After NAC agent notify that it respects the customer, user start this application. The question therefore, Agent NAC detectable by whom?

    Kindly share your experience about it. Thank you for your support.

    Kind regards

    Hiep

    Hiep,

    The feature you requested is passive revaluation and is made on intervals configured by the administrator.

    www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html#...

    Thank you

    Tarik Admani
    * Please note the useful messages *.

Maybe you are looking for

  • All bugs found w / the new MacPro round? Update older model?

    $2999.00 is a lot for a new Mac, but it seems good. However, their was no problem with the first batch? Worried, forced software updated on day of cost. I can barely afford a new iMac to $1500.00 and need advice.  I am retired and cannot afford to re

  • Case low

    Hello In 2011, I bought a MacBook Pro 13 "2011 series of Fnac (2 Evry, France). Since 2013, my MBP has lost his feet. Today, I live in the Morocco and here there is no center of Apple that could solve my problem, Furthermore, there are no stores that

  • Manual change of graphic data at run time

    Hello. And thanks in advance. Im trying to put on a mask limit on a chart in a similar way to 'Set' tab on the 'configure mask and limit the tests' expresses labview vi 2012. Does anyone know of a way to move the data points on a chart xy running dir

  • Unable to connect to a network printer, but can see and discover

    I'd appreciate any help with this: I have exhausted my Google searches for most of the day, and Microsoft support articles are of course a great help. The problem: I have a printer installation on one of the XP Home computers in our home network (all

  • I am using Microsoft Money 2000. Can I switch to a newer version when it becomes available?

    I have Microsoft Money as part of Microsoft Works.  I would like to move so I can import my Money files in Quicken.  This only works with the latest versions of Microsoft Money (2007 and 2008)