Cisco NAC: Issue for the Wireless Users being assigned "Un-Authenticated Role" to stop accessing the Network !!!

Hi,
I am looking for a solution to deal with the wireless NAC users being authenticating (Web Login Only) from a particular AD group. The mapped users gets into a particular role and access VLAN but un-mapped users get the default role which is "Un-Authentication Role" but also gets the same Access VLAN. So, the un-wanted users gets also the same access which is undesired.
I tried with one solution which is, i put those users into a role named as "Deny_Role" and Enable a Timer of 1 minute (least Time) on it, which seems working but i can see that user is disconnecting (session timeout) after 3 or 5 minutes. I want to limit this but again, i do not find this as an appropriate solution.
We could deal with wired users easily, bounce the port and get them again in "Unauthenticated Role" and VLAN will be "Un-Auth VLAN" with no network access or rediect them into a particular role with a specific VLAN. But, this is not valid in case of "Wireless Users".
So, I am looking for a solution to deal with the wireless users in this situation...
Please advise or give an idea.
BR,
Mubasher Sultan

Hi,
Any idea or suggestion...
BR,
Mubasher Sultan

Similar Messages

  • Procedure for creating a user and assigning him a role

    Hi folks,
    has anyone of you a procedure for creating a user and then assigning him a spezial role?
    The procedure has 2 arguments username and password. I think that its an easy one but I
    have not found the right packages.
    Thanks

    create or replace procedure new_user(username_in IN VARCHAR2, password_in IN VARCHAR2) is
      C_TEMP_TSP     CONSTANT VARCHAR2(30) := 'TEMP';
      C_DEFAULT_TSP  CONSTANT VARCHAR2(30) := 'USERS';
      C_DEFAULT_ROLE CONSTANT VARCHAR2(30) := 'SPECIALROLE';
    begin
      execute immediate 'create user ' || username_in ||
                        ' identified by ' || password_in ||
                        ' default tablespace ' || C_DEFAULT_TSP ||
                        ' temporary tablespace ' || C_TEMP_TSP;
      execute immediate  'grant '|| C_DEFAULT_ROLE ||' to '||username_in;
    end new_user;

  • ActiveSync issue for a single user

    Hello,
       We are finishing a migration to Exchange 2010 from 2007.  Everything is connecting fine so far for all users except one.  This user is the owner of the company, and a long time ago, like more than 20 years, instead of creating a copy
    of the Built-in administrator account, he renamed it for himself.
       Anyway, he is the only user that is unable to connect via ActiveSync.  The event viewer on the Exchange server says "User '[email protected]' cannot synchronize their mobile phone with their mailbox because Exchange ActiveSync has been
    disabled for this user.   But of course, in the EMC, it says that he is enabled, and I ran the command in the Management Shell to ensure it was enabled. 
       I did some research and found that checking the Include Inheritable Objects is supposed to help with this, but I did that and it still didn't work.  It also became unchecked again after a while. 
        I'm not sure where to go next at this point.  Every other mailbox on the server ActiveSyncs no problem.  It's just this one.
    Thanks.

    Create a new AD account for him that isn't a member of any built-in admin level groups and disconnect the existing mailbox and reconnect it to the new AD Account.
    Mail Enabling the admin account is just not going to work well in 2010/2013 or beyond and its not a good security practice to use it except for elevated tasks. Hopefully the owner appreciates that.
    You could mess with the AdminSDHolder stuff and allow the ActiveSync partnership to be created but I highly recommend against that.
    http://eightwone.com/2011/08/31/exchange-activesync-and-inheritable-permissions-issue/
    Twitter!:
    Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

  • Since upgrading to 10.8, my wireless stalls out. The drop down under the wireless icon says "Wi-Fi: Looking for networks- and has a rotating gear. I have to turn the wireless off and then back on to get back on the internet. Does anyone have a solution?

    since upgrading to 10.8, my wireless stalls out. The drop down under the wireless icon says “Wi-Fi: Looking for networks… and has a rotating gear. I have to turn the wireless off and then back on to get back on the internet. Does anyone have a solution? All iPhones and iPad and windows computers work fine.

    since upgrading to 10.8, my wireless stalls out. The drop down under the wireless icon says “Wi-Fi: Looking for networks… and has a rotating gear. I have to turn the wireless off and then back on to get back on the internet. Does anyone have a solution? All iPhones and iPad and windows computers work fine.

  • HT201441 i dont know the previous user of this phone and i'm stuck on the iphone icloud activation process

    i dont know the previous user of this iphone and i'm stuck on the iphone icloud activation process.
    what should i do?

    radhikaven wrote:
    i bought this phone in 2013 from dubai and used till last year june. I dropped the phone and got a problem with display as well as earpiece.
    Later the phone was having a carrier network issue. Was showing searching. i restored the phone to factory settings and when i tried to set up the phone, its showing that the phone cant be activated at this moment, please try again later.
    If your phone was bought second-hand (used) - something you haven't made clear - and it was Activation Locked by the previous owner (this wouldn't show up until you upgraded or reset it) then only he can unlock it. If you can't contact him to do so then you will not be able to use the phone. You can tell if this is the case because it will be asking for an Apple ID (which it will display partially) which is not yours.
    On the other hand if this was a new phone then you may have hit a temporary outage in the activation server and you should wait a bit then try again.

  • User is locked in R/3 but still access the application through portal

    We are currently on NW2004s SP10 .
    We locked the User A in R/3 SRM backend system and from Enterprise Portal the same User A login and try to access the SRM application in backend . The system is allowing to access which we want to prevent .
    The authentication ticket type is "SAP Logon Ticket" .  The User A is trying to access ITS services through Portal.
    Do we have specific SSO parameter which needs to set in backend SRM application .
    Thanks
    Chandrashekhar K

    Hi
    We have maintained the following profile parameter for SSO in our SRM system . From portal we are accessing the SRM system
    login/accept_sso2_ticket          1          
    login/certificate_request_ca_url     https://tcs.mySAP.com/invoke/tc/usercert               
    login/certificate_request_subject     CN=&UNAME, OU=&WPOU, O=mySAP.com User, C=DE               
    login/create_sso2_ticket          0               
    login/disable_cpic               0          
    login/disable_multi_gui_login          0          
    login/disable_multi_rfc_login          0               
    login/disable_password_logon          0               
    login/failed_user_auto_unlock          0          
    login/fails_to_session_end          3               
    login/fails_to_user_lock          3          
    login/isolate_rfc_system_calls          0               
    login/min_password_diff               1          
    login/min_password_digits          0               
    login/min_password_letters          0               
    login/min_password_lng               6          
    login/min_password_specials          0               
    login/multi_login_users               HP          
    login/no_automatic_user_sapstar          1          
    login/password_change_for_SSO          0          
    login/password_charset               1          
    login/password_expiration_time          60          
    login/password_logon_usergroup                         
    login/password_max_new_valid          0               
    login/password_max_reset_valid          0               
    login/system_client               400
    login/ticket_expiration_time          60
    login/ticket_only_by_https          0
    login/ticket_only_to_host          0
    login/ticketcache_entries_max          1000
    login/ticketcache_off               0
    login/update_logon_timestamp          m
    Please suggest as to change any parameter value . We want to restrict the user to access SRM system from portal if he is locked int e SRM system.
    Thanks

  • I can't unlock my ipod nano 4th generation.  The screen is still working, I can sync to my computer and I can see when it is charging but it stays in the mode of being locked even after I unlock it at the top.

    I can't unlock my ipod nano 4th generation.  The screen is still working, I can sync to my computer and I can see when it is charging but it stays in the mode of being locked even after I unlock it at the top. What could be wrong?

    Hi Saint09,
    Thanks for visiting Apple Support Communities.
    I'd recommend the steps in our iPod troubleshooting assistant:
    http://www.apple.com/support/ipod/five_rs/nano4gen/
    Regards,
    Jeremy

  • F.05 -   why the entries are being reversed even though I did not tick the

    Hi,
    Please advice why the entries are being reversed even though I did not tick the reversal button in F.05.
    Your assitance is very much appreciated.

    Hi,
    It is a standard SAP procedure by which the revaluation entries are automatically reversed. If you do not want to reverse the revaluation entries, you will have to Activate Delat Logic for the Valuation Area. SPRO Path is Financial Accounting (New)--> General Ledger Accounting (New) > Periodic Processing> Valuate --> Activate Delta Logic.
    Once you activate this Delta Logic, at the time of fc valuation, you will get the check box for Annual or Mid Term revalation will come. If you select the annual option, the automatic reversal will not happen.
    Regards,
    Amit

  • User wants to see the previous year's W-2 forms, while he is accessing the present year W-2 form

    Hi Folks ,
    I need your expertise in resolving the issue,
    Requirement: User wants to see the previous year’s W-2 forms, while he is accessing the present year W-2 form (2011, 2012 and 2013 years)
    Need to get the information whether we could able to get the previous year’s W-2 forms using standard functionality? Or we should use the customize functionality
    If we want to use the custom functionality , please let us know how to do it ?
    Thanks and Regards ,
    Deepak

    you can use the Features UTREL and UTRES
    Read complete configuration & guide document
    W-2 Online User Guide - ERP Human Capital Management - SCN Wiki
    Configuring Online W-2 - Online W-2 - SAP Library

  • Hi,  I have subscribed to the Creative Cloud for photographers (Lightoroom and Photoshop cc) but when I try to access the mobile lightroom the following message appears: "Your trial period has expired."  how can I fix it?

    hi,  I have subscribed to the Creative Cloud for photographers (Lightoroom and Photoshop cc) but when I try to access the mobile lightroom the following message appears: "Your trial period has expired."  how can I fix it?

    Chat Now button near the bottom for Activation and Deactivation problems may help
    http://helpx.adobe.com/x-productkb/policy-pricing/activation-deactivation-products.html
    OR
    Asked to sign in after paying may help
    -http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html
    or
    http://helpx.adobe.com/creative-cloud/kb/license-this-software.html
    Membership and Payments http://helpx.adobe.com/x-productkb/policy-pricing/membership-subscription-troubleshooting- creative-cloud.html

  • I am not able to access the "Settings" on my iPad 3. I just get a gray screen for about 30 seconds and then the app shuts down. I am also unable to access the App store, iTunes, or any app requiring an internet connection. Any thoughts?

    I am not able to access the "Settings" on my iPad 3. I just get a gray screen for about 30 seconds and then the app shuts down. I am also unable to access the App store, iTunes, or any app requiring an internet connection. Any thoughts?

    First, try a system reset.  It cures many ills and it's quick, easy and harmless...
    Hold down the on/off switch and the Home button simultaneously until the screen blacks out or you see the Apple logo.  Ignore the "Slide to power off" text if it appears.  You will not lose any apps, data, music, movies, settings, etc.
    If the Reset doesn't work, try a Restore.  Note that it's nowhere near as quick as a Reset.  Connect via cable to the computer that you use for sync.  From iTunes, select the iPad/iPod and then select the Summary tab.  Follow directions for Restore and be sure to say "yes" to the backup.  You will be warned that all data (apps, music, movies, etc.) will be erased but, as the Restore finishes, you will be asked if you wish the contents of the backup to be copied to the iPad/iPod.  Again, say "yes."

  • I accidentally put a passcode lock on my iPhone and I forgot what I set for it, is there a way to take it off without accessing the phone? I have restored my phone but it doesn't work, is there anybody that could help me please?

    I accidentally put a passcode lock on my iPhone and I forgot what I set for it, is there a way to take it off without accessing the phone? I have restored my phone but it doesn't work, is there anybody that could help me please?

    You can't "accidentally" put a passcode on any iPhone...its a multi-step process. Further, restoring an iPhone will remove the passcode, as the passcode is not included in an iPhone backup.
    Are you sure you're talking about the phone passcode & not something else...like the "Restrictions" passcode?

  • Accidentally removed from,sharing and permissions the admin user,and now i do not when i find the home icon at my computer i do not have permmission,and the mac does not works properly,lots of question mark at the dock ,please help

    accidentally removed from,sharing and permissions the admin user,and now i do not when i find the home icon at my computer i do not have permmission,and the mac does not works properly,lots of question mark at the dock ,please help

    I'm going to assume that since you deleted your hard drive and all its files, you had a backup, yes? If the backup has an OS (bootable clone), then you can boot into it by holding down the option key when you start up you iMac and choose the backup drive. Then use Carbon Copy Cloner or Super Duper to copy the files back to your iMac.

  • Our company has users on both Acrobat X and XI.  We have custom stamps in X that the XI users need to use. How do we transfer the stamps to use in the newer version?

    Our company has users on both Acrobat X and XI.  We have custom stamps in X that the XI users need to use. How do we transfer the stamps to use in the newer version?

    You just copy the stamp files from one machine and place them in the correct directory on the other. You can find the location of both the user and app stamp directories by running the following code in the interactive JavaScript console:
    app.getPath("user", "stamps");
    app.getPath("app", "stamps");
    Select both lines and press Ctrl+Enter (Windows) or cmd+enter (Mac). Here's what I get with this using Acrobat 11 on a Mac:
    user folder: /Macintosh HD/Users/georgejohnson/Library/Application Support/Adobe/Acrobat/11.0/Stamps/
    app folder: /Macintosh HD/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/Built-in/Comments.acroplugin/Stamps/
    The stamp files (PDFs) might have cryptic looking names, but you can safely open each to see what stamps they contain.

  • Hello! Ever since I upgraded my iPhone 5s to IOS 7.1, I am unable to access the iPhone Keyboard if I access contacts the recent calls tab. I am also unable to access the keyboard if I want to search for a contact as long as I went through the recent calls

    Hello! Ever since I upgraded my iPhone 5s to IOS 7.1, I am unable to access the iPhone Keyboard if I access contacts using the recent calls tab. I am also unable to access the keyboard if I want to search for a contact as long as I went through the recent calls tab. Has anyone a fix for this problem? If you want to try it out, do the following?
    Dial a number from your iPhone Keypad. After cutting the call, try to save the number you just dialled to your contacts by choosing the new contact option. You will see that you will not be able to key in the name of your new contact.

    Works fine for me.
    Try a reset: Simultaneously hold down the Home and On buttons until the device shuts down. Ignore the off slider if it appears. Once shut down is complete, if it doesn't restart on it own, turn the device back on using the On button. In some cases it also helps to double click the Home button and close all apps BEFORE doing the reset.

Maybe you are looking for