Hi,

I have in fact created the local authentication server on the CAM. It is currently set to Local DB.

As for the procedure used; I've been referring to the reference book from Cisco Press, which also can be accessed online:

http://www.networkworld.com/subnets/cisco/072507-ch10-cisco-nac-appliance.html?page=2

I've followed the instructions contained in Chapter 10 to the letter, with the the only difference being the IP addressing.

I'm thinking that I must be missing some step that is needed so that the CCA Agent will refer back to the NAS for the user authentication parameters.

Thanks for taking an interest in my case! Looking forward to resolving this.

hmmmm

On your Cisco Clean Access Agent, right click and select properties. Do you have your CAM IP or CAM service IP if in HA as your Discovery Address?

Hi,

it looks like the Discovery Host column in the CCA Agent properties page doesn't state any IP addresses. What step did I miss?

Even after I manually enter the IP address of the NAS, it is still not popping-up to enquire the authentication of the network user.

Ok, thought of a couple of more things. Since you are layer 2 and the CAS is inline with the default gateway a the discovery entry should not be needed.

If you right click on the agent is there a pop-up login or login option that you can select? These may not have been enabled during your install.

Here is a link for MSI instructions. This is what I used during our deployment. We did the auto-login option which will automatically prompt for credentials or use pass through credentials if using AD.

whoops forgot to paste the link :)

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/412/cam/m_agntd.html#wp1281997