I have been working on a lab set up that I would like to be able to show to potential customers for NAC Appliance (or CCA). I had no problems when using NAC in L3 OOB as might be deployed in a routed LAN type of setting, but I am having a horrible time getting it to work L3-IB with VPN/SSO even though I am trying my best to go by the documentation:
I find a few very confusing things about this document, and am suspecting that is where my trouble lies:
1) There is no mention of the RADIUS set up on this document other than to say "set it up". So I am wondering...
a) What version of ACS do I need? (3.3 currently).
b) Which RADIUS Service (IOS? IETF?)
c) What is the IP of the RADIUS server in that document? I see two addresses: 172.18.124.101 and 172.18.85.181. To make matters worse, there are discrepancies in the config of the ASA in that document which conflict with the screen shots.
Any help anyone can provide would be great.
Jason Bomar, CCIE #9316