Similar Questions

• Cisco ISE: External RADIUS server

  Hello

  I send RADIUS of NHP NHP, another. I have already defined "External RADIUS servers".

  So, how can I use this external RADIUS server to process my application?

  Looking at the user guide, but did not find information on this parameter (for the rule after rule not simple)

  Cela if anyone use this, please suggest me.

  Thank you

  Mathias

  Please specify which version you are using. There were improvements to the functionality of the proxy in ISE 1.1.1

  This can be used as follows:

  -Define "External RADIUS server"

  -Set the "Sequence of RADIUS server. This allows you to define a sequence of proxies that will send queries to until you get an answer

  -In the authentication policy when the rules instead of the allowed protocols can select a "RADIUS server Sequence.

• ISE external radius server

  Hello

  Given that roam JRS servers must be put into a sequence of Radius to the ISE server, which IP node address is supposed to be registered with JANET, PAN or each address IP of PSN. I would have thought that it's the PAN because all external RADIUS servers are configured on the PLATEAU, but thought I should ask just to be sure. Thank you

  Yes, even if the configuration is on the PLATEAU, only ise nodes that have the political role of active service, will be used to transmit requests by using external radius proxy functionality.

• Is it possible to map a promoter group in Cisco ISE to a group of users in Active Directory, using a RADIUS server?

  Hello!!

  We are working on a mapping between a promoter Cisco ISE group and a user group in Active Directory, but the customer wants the mapping through a RADIUS SERVER, to avoid the ISE by querying directly activate Directory.

  I know it is possible to use a RADIUS SERVER as source of external identity for ISE... but, is possible to use this RADIUS SERVER for this sponsor group manages?

  Thank you and best regards!

  Hi Rodrigo,

  The answer is no. There is no way to integrate the portal Sponsor config with a RADIUS server. Your DB for authentication Portal Sponsor options;

  AD
  LDAP
  User internal ISE DB

  Sent by Cisco Support technique iPhone App

• RADIUS server two in 1 Cisco router

  Hello

  Just need to know if it is possible to use two RADIUS server in 1 Cisco router. The first server RADIUS authenticate remote users to access our internal LAN while the other RADIUS server will authenticate users who will have access to routers. The reason why we cannot use the same RADIUS server to authenticate remote users and users of router is due to our contract with our supplier (long story!).

  in any case, if it's possible, could someone help me how to do or give me the link to the documentation.

  Thank you

  Yes, it's the way to do it.  This gives you two different methods, the user.

  connection key radius-server 1.1.1.1

  RADIUS - 2.2.2.2 key server logon

  3.3.3.3 RADIUS server remote key

  4.4.4.4 RADIUS server remote key

  RADIUS AAA server telnet protocol group

  Server 1.1.1.1

  2.2.2.2 Server

  AAA-server group remoteaccess radius Protocol

  3.3.3.3 Server

  Server 4.4.4.4

  AAA authentication login default group remoteaccess

  AAA authentication connection group telnet

  line vty 0 4

  SUCH connection authentication

  Line con 0

  authentication of SUCH loging

  This is an example which will allow your access telnet to the router to use a server group

  while allowing your users to remote access use other radius servers.

  -Jesse

• Send emails as a task without external SMTP server

  Hello

  I would like to send notifications by e-mail at set intervals, but ideally without needing an external SMTP server (if I could use an external SMTP server, it would be easy to do either with UTL_SMTP, UTL_TCP). It is possible to send mails from within applications using the APEX_MAIL package but I can not use this package in a task scheduler to a valid session. It should probably be possible to create a session of "false" (Giffy Martin on Oracle APEX D'Souza: how to create a Session of the APEX in PL/SQL) in a scheduled task, and then to send mails using APEX_MAIL but I hope there might be a simpler solution, so advice and guidance would be much appreciated.

  Kind regards

  Pavel

  If you do not want a 'Server SMTP external', which would be an "internal SMTP server" by your definition? APEX_MAIL is simply a wrapper around UTL_SMTP. You still need an SMTP server to send emails.

  See setting up Email to:

  http://docs.Oracle.com/CD/E59726_01/doc.50/e39151/adm_wrkspc002.htm#AEADM29163

• Unable to send accounting messages to the format of the RADIUS protocol to fortigate RSSO ISE of Cisco

  Hello

  I am working to get my shipment of Cisco ISE of Fortigate RSSO accounting messages (simple RADIUS sign) to work on the Fortigate firewall. I tried to add the Fortigate for logging targets at a distance and added the Fortigate under the categories of logging (accounting & Radius Accounting). In doing so, I ran a wireshark capture and found that the ISE send accounting messages to Fortigate in SYSLOG format. I need ISE to send the accounting information in the format RADIUS for RSSO to work on Fortigate firewall.

  I already had this work using Windows server (NPS) radius. So based on what I did in Windows I tried to reproduce the same thing to the ISE. I added Fortigate as external Radius server. I added the sequence Radius Server with Radius attribute as a class and I have a key in a custom for her string. I've also matched in the same attribute to Fortigate. And then selecting "use Proxy Service", I added an authentication strategy (uses the Radius Server sequence I created) instead of "Licensed protocols".» I brought this policy upwards.

  Then, I created a permission for the same policy. In the results of the authorization profile--> authorization policy, I added the attribute class. But every time that I add here, after registration, the attribute class is sitting next to the ASA VPN.

  Please confirm if my settings are ok or y at - it another way to get send ISE accounting messages in the form of RADIUS to Fortigate.

  PS: I only need to pass newspapers accounting and no need to send the authentication requests. There was an option to the Windows radius server where I could specify that authentication should happen on the radius of Windows and send accounting information to the remote radius server group.

  Any help with this is appreciated.

  Best regards

  SSK

  I am facing the same problem to send Radius accounting information to a Web proxy to perform filtering of content / granularity. Does anyone have any news about this? Maybe a Cisco support person.

  Rgds,

  Vanderlei

• How to restrict Internet access by using the RADIUS server via switch Catalyst 3560

  Dear all,

  I need a configuration using any. I have a small network of 15 users a 3560, which is in turn connected to a router ISR 2811. Interface fastethernet 0/24 switch 3560 I intend to connect to a unix based server RADIUS. ISP is connected on the opposite side of the 2811 to the fa0/0 interface.

  I want to make is that if someone among the 15 users tries to access the internet, they must be validated in the RADIUS server by their pre-configured user credentials. (I'm going to store 15 user credentials here). If someone else tries to connect (except those 15) he or she should be denied internet access.

  The RADIUS server will be having a login page to type the name of user and password.

  Please guide based on what commands I should inject into the 3560 or what specifically, I need to have to run this task.

  Thanks in advance!

  Samrat.

  I only did this in a very long time, but you probably want to do is activate the web authentication.

  http://www.Cisco.com/c/en/us/TD/docs/switches/LAN/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swwebauth.html

• VCAC 6.0 when and why to use an external server for Orchestration

  When and why use an external server orchistrator and not that which is incorporated into the VCAC

  Hello

  generally, we recommend to use a server external vCO, for the following reasons:

  (if apply current vCAC 6.0.1 version only, I hope not for future versions) the built-in vCO has a build number slightly less than version 5.5.1 vCO GA so a few new plugins only install & works correctly.

  An instance separate vCO is more weakly coupled to the vCAC device, so you can for example develop, operate and maintain the systems independently of each other.

  You can more easily multiple instances of vCO in cluster mode.

  If you use vCO not only in the context of vCAC, but for tasks of automation / operational General, you are not "bound" in the vCAC environment.

  Overall: more flexibility for the modest sum of just having an additional device.

  See you soon,.

  Joerg

• How 2 Configure ACS 4.2 to delegate authentication to the radius server

  Hello

  We need run the following scenario:

  Cisco VPN client (or any connect, Cisco SSL VPN client)---> Cisco ASA 5520---> Cisco ACS 4.2---> CAT Authentication Server

  The CAT authentication server is a Radius server. It can receive Radius authentication requests and respond. It is used for strong authentication TFA WBS similar to RSA OTP tokens.

  The question is: how we set up the 4.2 ACS to delegate authentication request to another Radius server.

  Thnx

  Add the RSA server as an external database, configure the drop user profile or a group to authenticate on the new external database rather than ACS DB Local (or Windows DB).

  Easy as pie!

  Please rate if this is useful.

• In Active/Passive Mode Radius server configuration

  We set up (active/active) the two ASA load balancing.  We also configure two Radius servers with load balancing.  At present, the Radius servers are configured with active/active.  Is it possible to configure a Radius Server with (active/passive)?

  RADIUS protocol Radius AAA server
  AAA-server Radius (inside) host XXX.XXX.XXX.XXX
  Timeout 300
  key *.
  RADIUS-common-pw *.

  AAA-server Radius (inside) host XXX.XXX.XXX.XXX
  Timeout 300
  key *.
  RADIUS-common-pw *.

  AAA accounting enable console RADIUS

  Thank you.

  Diane

  Diane,

  Well I'm still not 100% sure that you understand exactly what is happening. Normally, on a single ASA, authentication is always performed on the same radius server until it fails (i.e. active/passive as you call it).

  Now, you mention that you have 2 ASAs in load balancing, so I don't know if you mean that:

  (1) 2 users that connect to the same ASA get authenticated by radius 2 servers different (should never happen)

  or

  (2) when 2 users connect to the cluster, user1 gets redirected to ASA1 and authenticated on Radius1, while User2 will be redirected to ASA2 using Radius2 to auth. This could be normal if both ASAs are set up differently (defined in a different order radius servers) or an ASA had a problem connecting to Radius1, at some point and so it considered out of service.

  In any case, 'sh aaa-server protocol radius' and 'debug RADIUS' can help determine why an asa individual does not use (initially configured) primary radius server.

  HTH

  Herbert

• RADIUS server with no devices of the airport

  Is there a way I can set up a radius server by using the OS X application but not a Terminal airport at el capitan? Thank you

  See if that helps.

  Mavericks of OS X Server - setting up FreeRADIUS

• Use an external reference to AOchannel

  Hello

  Using a device of 6259, I try to generate two analog outputs in a task. However, one of the outputs analog must use an external reference (using APFI1 for example).

  The problem is that I can't find a way to indicate the external reference to a single channel.

  Even though the documentation says that the AOChannelCollection was a member of the public "Item", this is not the case.

  According to the manual of the 6259, it must be possible to assign the internal and external references per channel: "you can use one of the OD <0..3>signals as the AO reference for a different signal of AO. However, you need to externally connect this channel to APFI 0 or 1 APFI. ' - Manual usage of the series of the M, 5-2.

  Thank you.

  Hey,.

  I tested it with the following code by using two channels, each with a different external reference:

  myTask.AOChannels [0]. DacReferenceSource =
  AODacReferenceSource.External;
  myTask.AOChannels [0]. DacReferenceExternalSource
  = "/ Dev3/APFI0";
  myTask.AOChannels [0]. DacReferenceValue =
  10.0;
  myTask.AOChannels [1]. DacReferenceSource =
  AODacReferenceSource.External;
  myTask.AOChannels [1]. DacReferenceExternalSource
  = "/ Dev3/APFI1";
  myTask.AOChannels [1]. DacReferenceValue = 5.0;

  Hope this helps,

  Christian

• Touchpad HP Pavilion 17 works does not after using an external wireless mouse

  I have the HP Pavilion 17 laptop.  It is running Windows 8.1.  Everything worked fine until I used an external wireless mouse.  After unplugging the mouse the touchpad does not itself again.  I have therefore no pointer and no touchpad to use unless I have keep the external mouse not connected.  I tried the hard reset with the plug of the battery, unplugging, pressing the power button for 15 seconds and turning everything back on.  Still no work touchpad.  Had this happen last week and called HP because I only had the laptop for 3 days at this time here.  They had me do a system restore to an earlier point.  At this point, everything worked again and I toilet problem has been resolved.  This is why I used the external mouse always thinking that it wouldn't be a problem.  I was wrong.

  Also, I've seen other posts on a different notebook that has a toggle power button in the upper left corner of the touchpad to activate/disengage, but this was not one of these.

  Any help would be greatly appreciated.  My next step is to call HP again tomorrow and see if someone else has another solution.  I would obviously like the ability to use the touch pad or external mouse at any time without having to restart and go through all these other problems.  Otherwise, this phone pretty may be going back to the store this weekend.  :-)

  Thank you!!

  This fixed the problem! Thank you very much!! Seriously, 3 different phone calls to HP and not one of them ever talked about this easy solution!

• The web publishing tool to send data to an external web server?

  We have a customer who wants to be able to see the LabView to test the results of their office. At our office is located behind a firewall and, therefore, to allow access to the web server or something else would have open access to the outside world and I don't want to do that. Can the web server web publishing LV tool publishes to be external to the Organization? For example, you will need to use FTP credentials to access the external web server? Any information would be greatly appreciated.

  Hello

  I don't see a way to do it with remote façade panels. However, you can take a snapshot of your façade periodically and save it to the FTP server. In this way, the results of the tests are available on the FTP site.

  To save a snapshot of the façade, you use the VI reference (functions > programming > Appilcation control > reference VI Server), invoke the node (functions > programming > Application Control > node call) and the VI 'Write the JPEG' (functions > programming > graphics & Sound > graphic Format > write the JPEG file). VI reference to the reference of the thread invoke node entry, choose the front > get the Image method, and then wire the data output of the Image to write JPEG file VI to save it as a JPEG file on the FTP server.

  I hope this helps.