Cisco ACS self signed certifiacte

[Sonugnair_2]

Hi,

I am implementing NAC (framework). :-(

802.1x protocol is used. Bascically the scenario is that a laptop user plugging his device into the nw should get a pop up screen where he supplies username & password, then check if OS/antivirus sw status , if passed allow access else place in quarentine vlan.

I have CTA 2.0.1.14 , ACS 4.1 and catalyst 3750 with proper IOS. When i try to connect it prompts for username and not password. Then it says autehtication failed. The log in ACS is "EAP-TLS or PEAP authentication failed during SSL handshake". I read somewhere that this could be a problem with certificates.In ACS i created a self signed certificate (and installed it) , manually put it in a laptop and then installed it. (for testting). Is this the correct way to do it?.

Is there some straight forward configuration guide for NAC?

Pls help.

Regards

Sonu

[andrew.burns]

Hi,

The best place to start is the "Phase One Configuration and Deployment Guide" which can be found here:

http://www.cisco.com/application/pdf/en/us/guest/netsol/ns466/c654/cdccont_0900aecd80217e26.pdf

The 4 design guides are also extremely useful:

http://www.cisco.com/en/US/netsol/ns617/networking_solutions_design_guidances_list.html

Not sure about your exact issue but there are instructions for certificate installs, and also a good troubleshooting section in the phase one guide.

HTH

Andrew.