Clean Access Server is unavailable on the network

I have an issue where randomly (about 4 or 5 users per week out of about 150 concurrent users) people are getting "Clean Access Server is unavailable on the network". We are using the full client v4.7.0. Certs and DNS look good, and everything works fine for most people. I read about the "work offline" bug, do you think that could cause this? Also, the CAM and CAS clocks are about 4 minutes apart, what kind of issues could this cause?
Thanks!

I found it, it was described in TAC Case 614237013 w/ Nate Austin from RTP's AAA TAC. Bug ID # CSCta39899. Excerpts from the TAC case are below.
David Swafford.
=============================================================
Subject: SR 614237013 - NAC Agent - CCA Server Unavailable Repeatedly
Hi David,
My name is Nate Austin with Cisco TAC and I just accepted ownership of
your SR regarding NAC Appliance.
Looking at the logs I can see two way communication with the CAS so we
know it can reach it IP-wise. All the swiss communication is successful,
but it appears the HTTPS requests are the ones that are failing.
I have seen a couple things cause this:
1) Personal firewall blocking ports from CCA Agent.
2) More common - We use the same libraries as IE does for making HTTP
calls - If IE Offline Mode is enabled, this will cause the agent to
fail. Can you check in IE (especially if Firefox or Chrome are the users
default browser because they'd never check IE) and see if Offline Mode
is enabled. If so, disable it and try again?
Thanks,
Nate
=============================================================
Subject: Re: SR 614237013 - NAC Agent - CCA Server Unavailable Repeatedly
Sounds good.
FYI, if this does end up being the problem, there was a bug filed on
this CSCta39899, and in the 4.8 agent the agent will disable Offline
mode and re-enable it after it logs in.
Thanks,
Nate
Nathaniel Austin Cisco Systems
Customer Support Engineer Research Triangle Park, NC

Similar Messages

Clean access server and wireless users

Hi,
The AP has several vlans (employee, guest). There is a trunk up to the switch and all l3 vlan interfaces are created on the switch.
I would like to add a clean access server.
1) Besides the configuration of the clean access server, do I just need to move the l3 vlan interface from the switch to the clan access server untrusted interface?
2) Is the ip address of the trusted interface on the clean access server a trunk too?
Thank you,
Best regards,
Pascal

I think yes. The ip address of the trusted interface on the clean access server needs to be configured as a trunk too. This is upto my knowledge.

Invalid Clean Access Server

We are seeing these messages in our CAM logs:
"Unable to add user to Clean Access Server <CAS IP>, [00:00:00:00:AA:13 ## x.x.x.x] username"
While the clients see:
"Invalid Clean Access Server"
We are running 4.1.3.1 software and using In-Band for our wireless. This is best reproduced by logging into CA via the agent and then move locations (wireless). At the new location the agent says "logged-in" but when you open a web browser you are redirected to the web authentication page. When you login to the web auth page you'll fail and receive the "Invalid Clean Access Server" error message below the login form. After this you are in a loop you can't get out of even after right-clicking the agent and logging off.
The problem started after our upgrade from 4.1.1 to 4.1.3.1. Our TAC engineer hasn't found a solution yet so I thought I'd post here. Any help would be greatly appreciated.
Thanks,
-Dusty

I'll answer my own question:
Bug: CSCsl70418

Network Error: Clean Access Server could not establish a secure connection to Clean Access Manager

Hello everyone
I am implementing a failover solution of NAC in OOB VG version 4.8, I have 2 CAS and 2 CAM.
The Error I am getting is when I connect to both IP address and the FQDN of the CAS.
===========
Network Error:
Clean Access Server could not establish a secure connection to Clean Access Manager at camsrv3.cadivi.gob.ve.
This could be due to one or more of the following reasons: 1) Clean Access Manager certificate has expired 2) Clean Access Manager certificate cannot be trusted or 3) Clean Access Manager cannot be reached.
Please report this to your network administrator.
==========
For the CAM's I use this names camsrv1 and camsrv2. then generate a CSR in the camsrv1 with the name camsrv3.mycompany.com corresponding to virtual ip and it exported to camsrv2, Install the CA certificate of the company and everything works perfect.
This is the failover configuration
CAM:
Primary:     10.1.206.248 camsrv1.mycompany.com
Secondary: 10.1.206.249 camsrv2.mycompany.com
Virtual:       10.1.206.250 camsrv3.mycompany.com
Then I do exactly the same steps for the CAS's and this is the failover configuration:
Primary:     10.1.216.248 cassrv1.mycompany.com
Secondary: 10.1.216.249 cassrv2.mycompany.com
Virtual:       10.1.216.250 cassrv3.mycompany.com
Then I add the certificate of CAM in the CAS on the tab "Trusted Certificate Authorities" and vice versa.
The communication between all the CAM´s and CAS´s is correct (Primary, Secondary and Virtual). I can ping the IP and the FQDN and I can also manage the CAS through the CAM.
I verify that the time was right in the CAM and the CAS and all good up there.
Appreciate your help
Eduardo Navas

Eduardo,
Bump up the CAS/CAS communications logging on both the CAS and CAMs, and then look in the log files for clues.
On CAM they live in /perfigo/control/tomcat/logs and on CAS in /perfigo/access/tomcat/logs
HTH,
Faisal
If you find this post helpful, please rate so others can find the answer easily

Clean Access Server could not establish a secure connection

I have a OOB Real IP GW setup on v4.1.2
I seem to have a problem with the CAS connecting to the CAM although I have added the CAS to the CAM and can manage the CAS from the CAM.
I noticed while troubleshooting client authentication that the client was not being redirected to the logon web page and it had full access to the trusted network from the untrusted authentication vlan. I eventually figured out that if I change the CAS Filter Fallback method from Allow to ignore then it tries to authenticate the client. However the fact that the fallback is activated tells you that something is not right.
I have 2 problems:
A) The clients web page is redirected for authentication but it only lists the domain name in the URL and not the hostname or host IP. In the lab I do not have a DNS server and it would not help as it does not include the hostname in the URL anyway. How do I fix this or perhaps it's related to the 2nd problem.
B) When I manually change the URL by replacing the domain name with the IP of the CAS (untrusted OOB Real IP GW) then I get the following error message when logging on:
Network Error:
Clean Access Server could not establish a secure connection to Clean Access Manager at mydomain.com.
This could be due to one or more of the following reasons: 1) Clean Access Manager certificate has expired 2) Clean Access Manager certificate cannot be trusted or 3) Clean Access Manager cannot be reached.
Please report this to your network administrator.
I would guess the culprit is No 2 but surely the system can run on self signed certificates? I have an NTP server so time is in sync. I have even tried regenerating the cetificates on the CAM
& CAS.
Any ideas?

To overcome problem B, I regenerated the SSL Certificates using the host IP address instead of the name for all the CAM & CAS appliances. This seems to have resolved this problem.
I also SSH'd from each of the CAS's to each of the CAM's from the CLI and it then prompts to permanently store the certificates. I'm not sure it this was necessary though.

Office 2010 & 2007 - Excel and Access File Locking Out On the Network With Multiple Users

This is also posted in the Office 2010 - IT Pro General Discussions, but was suggested to repost here, since a definitive answer was not found.
Hi,
An issue that's happening is that Excel and Access files are locking on the network. We're currently using Office 2007 and 2010.
Here are some different scenarios that are happening:
When opening the file it is locked out by “User X” which is the person that has the file locked out and no one else can open the file.
When opening the file it is locked out by “User Y” which is NOT the actual person, but is locked out by “User X” and no one else can access the file.
When opening the file it is locked out by “…another user” which is generic and no one else can access the file.
The two more common events are incident 1 and 2 with 3 happening the less common.
This message will continue until the sessions are closed through computer management on the file server.
The file server is running Windows Server 2003.
This does happen on both Windows XP and Windows 7 clients.
This does happen for users using Office 2007 and Office 2010.
There are two sets of Office 2010 Users when it comes to patches. Everyone has the most current patches with Office 2010 SP2 while anyone that has Microsoft Project 2010 is using all the current update before Office 2010 SP2.
All users that are using Office 2007 have all the current patches and service packs.
Another variable is that we have users that will leave a file open on the network for 3+ days and after a while it will lock the file out.
Also we have Shadow Copy that runs daily on the system which I'm not for sure if that impacts anything if a file is opening during that time.
Any ideas on how to mitigate the lock out issues would be appreciated.
Thanks,
Binary Process
Edit November 12, 2013: This issue can occur if and if not another person actually has the file open. If the person doesn't have the file open then there is a hung connection which needs to be disconnected by going to the Computer Management of the File
server.

Hi Binary,
I know that the description of the hotfix does not relate to the issue. The purpose is to install it for upgrading SMB related file.
A similar issue I encountered before:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b7fcc59b-52d9-4a02-863a-1a529bcb8cb1/temp-doc-etc-files-dont-close-after-a-file-closes-this-causes-locked-files?forum=winserverfiles
It is resolved by upgrading SMB files so maybe it will help on your case.
Another hotfix which may related:
http://support.microsoft.com/kb/983458
If you have any feedback on our support, please send to [email protected]

Trying to restore iPhone 4s, and receive "Connection attempt to firmware update server was unsuccessful. The network connection timed out."

I've tried updating on both my desktop and laptop, neither work. I have the newest version of iTunes as well, so that can't be the problem. When I run diagnostics:
Microsoft Windows 7 x64 Home Premium Edition Service Pack 1 (Build 7601)
Hewlett-Packard HP Pavilion g7 Notebook PC
iTunes 11.3.1.2
QuickTime not available
FairPlay 2.6.15
Apple Application Support 3.0.6
iPod Updater Library 11.1f5
CD Driver 2.2.3.0
CD Driver DLL 2.1.3.1
Apple Mobile Device 7.1.2.6
Apple Mobile Device Driver 1.64.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.6.502
Gracenote MusicID 1.9.6.115
Gracenote Submit 1.9.6.143
Gracenote DSP 1.9.6.45
iTunes Serial Number 0038BB880CE6FDE0
Current user is not an administrator.
The current local date and time is 2014-09-04 12:48:09.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is not supported.
Core Media is supported.
Video Display Information
Advanced Micro Devices, Inc., AMD M880G with ATI Mobility Radeon HD 4250
**** External Plug-ins Information ****
Plug-in Name: Last.fm AudioScrobbler
Plug-in Loaded: Yes
Plug-in Version: 4.0.5
Plug-in File Version: 6.0.5.4
Plug-in Path: C:\Program Files (x86)\iTunes\Plug-ins\itw_scrobbler.dll
iPodService 11.3.1.2 (x64) is currently running.
iTunesHelper is currently not running.
Apple Mobile Device service 3.3.0.0 is currently running.
**** Network Connectivity Tests ****
Network Adapter Information
Adapter Name: {CE989488-FC81-488B-A970-91D722749820}
Description: Realtek RTL8188CE 802.11b/g/n WiFi Adapter
IP Address: 192.168.254.3
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.254.254
DHCP Enabled: Yes
DHCP Server: 192.168.254.254
Lease Obtained: Thu Sep 04 12:18:22 2014
Lease Expires: Fri Feb 25 02:18:22 2022
DNS Servers: 192.168.254.254
Adapter Name: {5E3757D2-481F-4D48-B535-A6A6ACF48517}
Description: Realtek PCIe FE Family Controller
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway: 0.0.0.0
DHCP Enabled: Yes
DHCP Server:
Lease Obtained: Wed Dec 31 17:00:00 1969
Lease Expires: Wed Dec 31 17:00:00 1969
DNS Servers:
Active Connection: LAN Connection
Connected: Yes
Online: Yes
Using Modem: No
Using LAN: Yes
Using Proxy: No
Firewall Information
Windows Firewall is on.
iTunes is NOT enabled in Windows Firewall.
Connection attempt to Apple web site was successful.
Connection attempt to browsing iTunes Store was successful.
Connection attempt to purchasing from iTunes Store was successful.
Connection attempt to iPhone activation server was successful.
Connection attempt to firmware update server was unsuccessful.
The network connection timed out.
Connection attempt to Gracenote server was successful.
Last successful iTunes Store access was 2014-09-04 12:47:39

Hi christeag,
The only thing I can identify as an issue is that your Windows Firewall is running and iTunes is not enabled in it, so this may be the source of your issue. Here is an article for you that will help you rectify this situation:
How to enable iTunes in Windows Vista, Windows 7, and Windows 8 firewall
http://support.apple.com/kb/HT2553
Thanks for coming to the Apple Support Communities!
Regards,
Braden

Connection attempt to firmware update server was unsuccessful. The network connection timed out

Hi. I have recently updated my iTunes to version 10.5.0.142 and cannot access the iTunes store after the upgrade. I have checked all the support articals and tried uninstalling and reinstalling iTunes, ensured that the firewall,internet explorer etc are correctly configured. Any help would be appreciated.
Below my diagnostics results:
Connection attempt to firmware update server was unsuccessful.
The network connection timed out.
Microsoft Windows 7 x64 Business Edition (Build 7600)
Dell Inc. Latitude E6520
iTunes 10.5.0.142
QuickTime not available
FairPlay 1.13.35
Apple Application Support 2.1.5
iPod Updater Library 10.0d2
CD Driver 2.2.0.1
CD Driver DLL 2.1.1.1
Apple Mobile Device 4.0.0.96
Apple Mobile Device Driver 1.57.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.3.494
Gracenote MusicID 1.9.3.106
Gracenote Submit 1.9.3.136
Gracenote DSP 1.9.3.44
iTunes Serial Number 0034AABC03B14CA8
Current user is an administrator.
The current local date and time is 2011-11-05 23:04:22.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is supported.
Core Media is supported.
Video Display Information
NVIDIA, NVIDIA NVS 4200M
Intel Corporation, Intel(R) HD Graphics Family
**** External Plug-ins Information ****
No external plug-ins installed.
iPodService 10.5.0.142 (x64) is currently running.
iTunesHelper 10.5.0.142 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.
**** Network Connectivity Tests ****
Network Adapter Information
Adapter Name: {D16D8541-B70F-4DD7-A7C6-32B8EC55622C}
Description: Cell C
IP Address: 197.105.149.240
Subnet Mask: 255.255.255.255
Default Gateway: 0.0.0.0
DHCP Enabled: No
DHCP Server:
Lease Obtained: Thu Jan 01 02:00:00 1970
Lease Expires: Thu Jan 01 02:00:00 1970
DNS Servers: 41.50.20.29
41.50.20.61
Adapter Name: {37C32779-B216-4D52-80FA-B4C3DF705DF3}
Description: DW1530 Wireless-N WLAN Half-Mini Card
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway: 0.0.0.0
DHCP Enabled: No
DHCP Server:
Lease Obtained: Thu Jan 01 02:00:00 1970
Lease Expires: Thu Jan 01 02:00:00 1970
DNS Servers:
Adapter Name: {6ADC43CF-4031-4D31-9B46-2BF2867B8E09}
Description: Intel(R) 82579LM Gigabit Network Connection
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Default Gateway: 0.0.0.0
DHCP Enabled: Yes
DHCP Server:
Lease Obtained: Thu Jan 01 02:00:00 1970
Lease Expires: Thu Jan 01 02:00:00 1970
DNS Servers:
Active Connection: Cell C
Connected: Yes
Online: Yes
Using Modem: Yes
Using LAN: No
Using Proxy: No
SSL 3.0 Support: Enabled
TLS 1.0 Support: Enabled
Firewall Information
Windows Firewall is on.
iTunes is enabled in Windows Firewall.
Connection attempt to Apple web site was successful.
Connection attempt to browsing iTunes Store was successful.
Connection attempt to purchasing from iTunes Store was successful.
Connection attempt to iPhone activation server was successful.
Connection attempt to firmware update server was unsuccessful.
The network connection timed out.
Connection attempt to Gracenote server was successful.
Last successful iTunes Store access was 2011-11-05 22:37:41.

Finally found a solution:
For PC users, before reinstalling, try this:
Start-> Programs -> Accessories -> (Right Click On Command Prompt) ->Run as Administrator
then type in:
netsh winsock reset
hit enter, restart PC, open iTunes. Hopefully fixed.

Font management on a Mac Server for use via the network

Can font management be done on a Mac Server through Font Book so that other users can have one place where they can access our organized fonts via the network?

Ok found a sollution, i tried a couple of things, it boils down to this.
login as admin user
1. demote the network user to a local user,
     use workgroup manager for it use export in menu to export user from LDAP
     import to Local directory, reset the password and delete the LDAP user.
2. you chould now be able to localy login to the account, do that.
3. open the terminal and run the following commands (probably need sudo for it and you need to change <username> to the user you want to change)
     chmod -R -N /Users/<username>/
     chown -R <username>:staff /Users/<username>
     chmod -R 700 /Users/<username>
4. check that every thing in you're account is working again as should.
5. promote local user to network user.
use workgroup manager for it use export in menu to export user from Local
     import to LDAP directory, reset the password and delete the Local user.
this did the trick for me, hope it helps.
Ben

'dns' server failed to upgrade the Network Registrar configuration databases!!!

I have problem with installation the Network Registrar 7.2. According to the install log: "The 'dhcp' server failed to upgrade the Network Registrar configuration databases !!! See C:\NetworkRegistrar\Local\temp/dhcp_upgrade_status_log for details." The dhcp_upgrade_status_log is not found on my PC.
Do somebody familar with such problem?
Thank in advance.

Hi Dave,
Any luck on this thread? Where you able to find a work around on this problem? I am encountering also the same problem thou my OCR and Voting Disk are on raw partition.
I have done clean-up using the "dd" command and re-install CRS a couple of times and still with no luck...
Hope RAC gurus can help us on this.
Any help would be much appreciated.
Thanks!

"Exception Processing Message" error when clicking the Accessing Server Data link on the start page

When I first started the application, I click the Accessing Server Data link on the start page. I immediately got the error "Exception Processing Message c0000013 Parameters 75b6bf7c 4 75b6bf7c 75b6bf7c in a dialog box titled "Windows - No Disk". I had to used Task Manager to remove the box after closing Flash Builder 4. I then tried the video tutorial on "PHP Services in Flash Builder 4". I keep receiving an error during service introspection trying to connect to the PHP class. It was the same error as the other individual "Cannot Connect to PHP Service". So I tried another tutorial and generated a sample PHP class. I moved a datagrid on to the stage, droped in the getAllItems function, and configured the return type. However, when I ran the app, I received the same error "Exception Processing Message" again. I have attached the screenshot of the error in addition to my phpinfo and log files.

"The exception process message" is definitely a issue. Is it happening consistently, if so can you file a bug at bugs.adobe.com/flex and give out your machine config details, and the error log.
With regards to generating a new php file and the introspection error that you are getting, looking at the logs it probably is two fold.
First off the name of the file and the class name should be the same, are you having employeeServices as the name of the class in employeeServices.php file.
Second, It seems prior to generating this new file, you had a syntax error at line 5.
It would be easier to figure out what the error is, if you can also attach the php file, by removing any sensitive information in that.
Hope this helps.
Thanks
-Sunil

REP-56040: Server already exists in the network

Hi,
I use report server on a solaris 8.
When I stop/start it I get the error message:
REP-56040: Server already exists in the network
even when I properly shutdown it. I tried stopping the application server, killing all the process, the only solution I found was to reboot the server.
Do you know if their is a kind of lock file to erase?
Thanks,
Pierre-Yves
[email protected]

Hi FormsEleven
Thanks for your reply
When run the following found only one server
C:\DevSuiteHome_1\BIN>rwdiag.bat -findall
Broadcast mechanism used to locate servers
Channel address = 228.5.6.7
Channel port = 14021
(1) Name = repserver : Type = server : Host = Shabar-PC
C:\DevSuiteHome_1\BIN>After done the said change I get the following error when starting the report server with the following command
rwserver server=repserver startError
REP-56114: Bind to naming server failed
:org.omg.CORBA.COM_FAILURE: vmcid: SUN minor code: 201
completed: No Cheers
Shabar
Edited by: shabar on Apr 9, 2010 5:23 AM

Home Network and accessing all hard drives on the network

In 10.4, when connecting to another computer on my network, I was able to connect to any disk drive that was connected to any computer on my network. With 10.5, it seems I cannot do that. All I seem to be able to connect to is the home account (in my case, frankmlinar). Did something change or is there a setting I do not know about?
One of the reasons I ask is that I serve my own web site, which is located at .../library/WebServer on one of my computers. I want to be able to access the files from wherever I am. I also like access to all files at any time without running all over the place.

It sounds like you are logged in as Guest (which only has access to each users home directory and drop box). If your navigating to the server via Shared in the sidebar, it should say the name of the user you are logged into that server as. It defaults to Guest. If it is Guest, click the Connect As button and log in as the desired user. You should then be able to see the share points (hard drives etc) you expected.
{quote:title=frankmlinar wrote:}My definition of persistent for use below is: When logged on as a registered user, the computer remains logged on and does not revert to Guest when clicking on various computers or drives in the finder and then returning to the logged on computer in the finder.{quote}
So this is the behavior you want. Correct? You want to only log in once and not have it revert back to being logged in as Guest if you navigate somewhere else and then back again? Correct
So, what you are seeing is this:
Step 1) Click on the server in the sidebar. It automatically, by default, logs you in as Guest.
Step 2) Click on the Connect As button and an Authentication dialog will appear. Login as another user (say Bob).
Note: You should be able to see the share points with no problem.
Step 3) Click on the "Desktop" entry in the sidebar
Step 4) Click on the same server as in Step 1 in the sidebar
Expected results: It will log you in as Bob.
Actual results: It will log you in as Guest.
This is behaving correctly (and is how AFP works). If you want it to remain logged in as Bob after Step 4, either create a keychain via the authentication dialog in Step 2 or before Step 3 you double clicked one of the hard drives listed for that server (or single clicked if your in Column View) to mount it.
Just logging in to an AFP server creates a temporary/soft connection with the server, you have to mount something to make it a solid connection.

NAC/Clean Access Server no longer intercepting Clients after upgrade

We recently upgraded our CISCO Clean Access Manager and Server to version 4.8.2 from 4.8.0. Everything seemed to be working fine but I had a user log in without having the NAC Agent running and they had full access. We didn't change anything other than upgrading to the new version. We have found that the user has access even before the Windows Agent is completed with the assessement of the client. It worked fine before the upgrade....Again, we made no changes other than upgrading to the new version (no route changes, etc).
I even tried an explicit deny for the user's workstation's mac and the NAC SErver still let him through....I am a bit perplexed...Thanks for any assistance.

Hmm, i removed the line but it does not help me ?
I did run following command in terminal:
sudo pico /Library/Server/Mail/Config/postfix/main.cf
Removed the "reject_non_fqdn_helo_hostname" from the line smtpd_helo_restrictions.
Saved the file and restarted Mail service
get this in log when i try to send from a windows client with Outlook2010:
Aug 15 17:42:09 lundmark.jetoma.se log[236]: auth: Error: od(annicalundmark,192.168.20.103): Authentication server failed to complete the requested operation.
Aug 15 17:42:09 lundmark.jetoma.se log[236]: auth: Error: od(annicalundmark,192.168.20.103): authentication failed for user=annicalundmark, method=DIGEST-MD5
Have tryed different ports like 25 and 587 with SSL, TLS and "none" in SMTP advanced settings on klient.
I did use the same instructions before in Lion server and there it did work ?!
Any more ideas ?
regards
Jörgen

Cisco Clean Access Server eth0 port inactive on install

I am trying to learn how the Cisco NAC appliances work. I have created a small self-contained test network with a Server 2003 domain controller, a fake domain setup and some workstations joined to the domain.
I have two NAC appliances, one is the Server and one is the Manager.
When I follow the instructions from the manual to install the server from the CD everything seems to go fine. I plan to use it as a bridge in the network so I applied the same IP address to both the eth0 and eth1 interface (the eth1 interface is not connected to the network during install as per instructions)
Here is the issue I am having: After configuration is finished and the CCA server re-boots, I cannot ping the server when it is connected by eth0. If I swap the network cable over to eth1, however I can ping the device.
Is this normal?

I have the same issue. But it gets even stranger; I had the CAM/CAS working in a test LAN enviroment, got the AD SSO to work by appllying VLANs based on AD group membership of the user logging on. Client was pleased.
Move the two NAC devices to their location and reloaded clean both CAM & CAS from CD, did the same configuration and now eth0 (Trusted) can't see the AD domain controller but can see the CAM. I ran nslookup on the CAS to test the network settings and the result is no server found - the DNS server is the AD domain controller.

Clean Access Server is unavailable on the network

Similar Messages

Maybe you are looking for