NAC L3 OOB - Online Users not correct

I'm testing a NAC 4.1.3 L3 OOB Real IP configuration and have come across an anomaly. Can someone help please.
I have configured two switches to be managed by NAC and have configured a role for Web Authentication and set all ports to be controlled.
When I connect a PC to switch 1 and authenticate all works well and the View Online Users displays the PC/role/Switch Port correctly.
I then disconnect the PC and patch it into the Switch 2. I then authenticate but instead of the port being moved to the correct VLAN it is left in the authentication VLAN and the Web Login cycles and asks me to log in again. Looking at the Online Users display it says I'm online on Switch 1 on the port I have disconnected from. This is INCORRECT!
Looking at switch 1, it has moved the port I was connected to the VLAN it should be after authentication. This should have been done to the port I'm now on at the Switch 2!
MAc notifications are used and Linkup/downs are enabled on the switches. They are not stacked. When disconnecting from the switches it correctly removes me from the online users. After authentication on the new switch it puts me back on the original switch where I was!!!!!!
This is most infuriating, it means the product is useless if I have users moving from one desk to another ending up on a different switch where they will no longer be able to work as they cannot get past authentication.
All help is gratefully received.
Thanks,
Paul Kyte

Hi, Paul
>>I then disconnect the PC and patch it into the Switch 2. I then authenticate but instead of the port being moved to the correct VLAN it is left in the authentication VLAN and the Web Login cycles and asks me to log in again. Looking at the Online Users display it says I'm online on Switch 1 on the port I have disconnected from. This is INCORRECT!
Have a look at the Switch Management ->Port Profiles and below "Options: Device Connected to Port" (the second one) "Change to .... if the device is certified" there should be Access VLAN option -make it active.

Similar Messages

  • Credentials of the configured SERVICE USER not correct

    Hi Gurus
    Is there any way to know the login credentials for a service user(configured in SU01 TCODE).
    Actually,I am gettinf 401 authentication error when I try to post my message through a web service in PROD env.
    In QA and DEV ,its running fine with same credentials of the SERVICE USERconfigured (in ID).
    My scenario is a synchronous SOAP to Proxy.
    Regards,
    Sriparna

    Hi Sriparna,
    Do u have same roles In Production whatever u have in DEV and QA.
    1)First u have to compare the userID Roles.
    2)Check the u r ID have this role SAP_XI_IR_SERV_USER,SAP_XI_DEVELOPER_ABAP,SAP_XI_DEVELOPER_J2EE,SAP_XI_IS_SERV_USER,SAP_XI_RWB_SERV_USER,SAP_XI_MONITOR_ABAP,SAP_XI_MONITOR_J2EE,SAP_XI_MESSAGE_MODIFY.
    Thanks
    Ravi

  • Error messages: The song names for this CD could not be found online; User not registered for online use.  iTunes 12 - Windows XP - How do you fix this?

    iTunes 11 worked fine.  This only occurred after downloading iTuens 12.  I saw resolutions for Mac (deleting files), but how can this issue be resolved on Windows XP?

    Thanks!  That worked.
    I did the.....
    Press the WinLogoKey+R
    Type in %appdata% and press return
    Double click on Apple Computer
    Double click on iTunes
    Delete the file CD Info.cidb
    but that didn't work.
    Then I did the....
    Try deleting com.apple.iTunes.Gracenote.plist in the same folder
    and that didn't work.
    BUT....when I did the....
    and if that doesn't work try deleting iTunesPrefs.xml.
    the names displayed successfully, and I was able to download the album art work also.  I left the preferences as is before and after the file deletion.
    Thanks for your help!!!!!

  • I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    The ""not recognized for on-line use". error is associated with the Gracenote service that iTunes uses to look up and retrieve metadata for CDs.  Some users have reported that this error occurs when trying to import from CD, subsequent to upgrading to version 12.  A number of slightly different solutions have been reported (though all of a similar nature).
    Try walking through the following steps - before starting you may have to enable hidden files and folders to be viewed - in Windows 7 / Windows Explorer select Organize > Folder and search options, then on the View tab make sure that Show hidden files, folders and drives is selected.  Without this you won't see the AppData folder in C:\Users\username\
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this doesn't work:
    In iTunes, select Edit > Preferences and make a note (or take a screenshot) of your preferences settings in all relevant tabs
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following file:iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this second procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1.
    If this one didn't work:
    Exit iTunes
    Check the following folders:
    C:\Users\username\AppData\Local\Apple Computer\iTunes
    C:\Users\username\AppData\LocalLow\Apple Computer\iTunes
    Delete any copies of the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    Again, if this procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1 of the second procedure. If you're still not able to retrieve CD info:
    Exit iTunes
    In Windows, select Start > Control Panel > Programs and Features.  Find the entry for iTunes, right-click and select Repair.
    When this process has finished, restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If none of these have worked (and almost everything I've seen suggests you should be OK by this point), you may have an issue with the installation and configuration of iTunes itself.  If you have got this far, see turingtest2's notes on Troubleshooting issues with iTunes for Windows updates for advice on how to remove and replace of all components of iTunes.

  • NAC OOB logoff feature not working

    Hi all,
    I've deployed NAC in L2 OOB VG mode with ADSSO and I'm trying to use the OOB logoff feature but it's not working. The VLAN change detect feature doesn't work either (I think the two problems might be related).
    It will work if each user role is assigned a different auth/access VLAN pair but in my setup, everyone has a common auth vlan and separate role-based access vlans. Because of this, I have to use the IP refresh feature as well (this works fine).
    I'm running Windows Vista and version 4.8.0 of the NAC software with version 4.8.1.5 of the agent
    I checked the release notes and found that caveat CSCth60233 identifies this bug with the VLAN change detect with the workaround being to refresh the IP address automatically after being logged out. Does anyone know of a workaround for this problem to do this automatically? Is a solution for this problem in the works?
    Also would anyone be able to help me with my OOB logoff feature not working? I've configured everything according to the documentation.
    I appreciate your responses
    ~Xavier

    Here are my configs if necessary. Tell me if anything else is needed.
    User Management > User Roles
    List of Roles
    Edit Role
    Traffic Control
    Bandwidth
    Schedule
    Disable this role
    Role Name
    Role Description
    Role Type
    Normal Login Role Quarantine Role
    *Max Sessions per User Account             ( Case-Insensitive Session Identifiers             )
    (1 – 255; 0 for unlimited)  
    Retag Trusted-side Egress Traffic with VLAN (In-Band)
    (0 – 4095, or leave it  blank)(*This option has been deprecated, and it will be removed in  upcoming  releases)
    *Out-of-Band User Role VLAN
    VLAN ID VLAN Name                 (if left blank, it will default to the default access vlan             settings in the Port Profile)
    *Bounce Switch Port After Login (OOB)
    Enable               Disable               (This option is effective only when port profile is set to use it)
    *Refresh IP After Login (OOB)
    Enable               Disable               (This option only applies to L2 OOB Virtual Gateway with Role VLAN             as Access VLAN and switch port is NOT bounced after VLAN change)
    *After Successful Login Redirect to
    previously requested URL
    this URL:
    (e.g. http://www.cisco.com/)
    Redirect Blocked Requests to
    default access blocked page
    this URL or HTML message:
    *Show Logged-on Users
    User info
    Logout button
    Enable Passive Re-assessment                          (To enable Passive Re-assessment for OOB Agent             connections, you must also enable the OOB Logoff option at             Device Management > Clean Access > General Setup > Agent Login.)
    Re-assessment Interval
    (Minimum of 60 minutes and maximum of 1440 minutes [24 hours])
    Grace Timer
    (Minimum of 5 minutes and maximum of 30 minutes)
    Default action on failure
    Continue Allow user to remediate Logoff user immediately
    (*only applies to normal login role)
    Device Management > Clean Access
    Certified Devices
    General Setup
    Network Scanner
    Clean Access Agent
    Updates
                Web Login   ·  Agent Login 
    User Role
    Unauthenticated Role(not common) role_engineer role_developer role_admin role_sales role_guest
    Operating System 
    ALL WINDOWS_ALL WINDOWS_XP WINDOWS_VISTA_ALL WINDOWS_7_ALL MAC_ALL MAC_OSX LINUX FREEBSD SOLARIS_ALL SOLARIS_86 SOLARIS_SPARC UNIX VMS OS2 PALM
    (By default, 'ALL' settings apply to all client operating systems if no OS-specific settings are specified.)
    Enable OOB logoff for Windows NAC Agent and Mac OS X Agent        (This global option applies to all OOB CASs and user roles and  enables Agent logout and heartbeat timers for OOB Agent connections. You  must also enable this option for Passive Re-assessment to function with  OOB Agent connections.)
    Require use of Agent
    (for Windows & Macintosh OSX only)
    Agent Download Page Message (or URL):
               Network  Security Notice: This network is protected by a Cisco NAC  Appliance Agent, a component of the Cisco NAC Appliance Suite. The Agent  ensures that your computer meets the requirements for accessing this  network, and helps you keep your computer secure and up-to-date. 
    Please use the Agent to log in to the network.
    If you  don't have the Agent software yet, download it by clicking the button  below. After downloading the installation file, run it to complete the  installation.
    If you have already downloaded and installed the  Agent, please close this window and right-click the Agent icon in the  system tray and choose Login from the menu. Enter your usual network  user name and password in the login window.
    Require use of Cisco NAC Web Agent (for Windows only)
              Cisco NAC Web Agent Launch Page Message (or URL):
    Network  Security Notice: This network is protected by the Cisco NAC  Web Agent, a component of the Cisco NAC Appliance Suite. The Cisco NAC  Web Agent ensures that your computer meets the requirements for  accessing this network, and helps you keep your computer secure and  up-to-date.
    Please launch Cisco NAC Web Agent by clicking the  button below.
    Allow restricted network access in case user cannot use   NAC Agent or Cisco NAC Web Agent
              Restricted Access User Role: 
    role_engineer role_developer role_admin role_sales role_guest
              Restricted Access Button Text: 
    Restricted Network Access Message:
               Restricted  Network Access: If you cannot use a Cisco NAC Appliance  Agent, you can obtain restricted network access temporarily by clicking  the button below.
    Show Network Policy to NAC Agent and Cisco NAC Web Agent users (for Windows only)
              Network Policy Link:  
    Logoff NAC Agent users from network on their machine logoff or shutdown after   
        secs (for Windows & In-Band setup, for OOB setup when OOB Logoff is enabled)
         (Setting the time to zero secs will logout user immediately. Valid range: 0 - 300 secs.)
    Refresh Windows domain group policy after login
    (for Windows only)
    Automatically close login success screen after    
        secs
         (Setting the time to zero secs will not display the login success screen. Valid range: 0 - 300 secs.)
    Automatically close logout success screen after    
        secs
    (for Windows only)
         (Setting the time to zero secs will not display the logout success screen. Valid range: 0 - 300 secs.)

  • Keychain Access: cannot add a new item: user name or passphrase not correct

    When trying to add a new item to "Keychain Access", the application suddenly refused to do so. Error message:
    Title: An error has occurred. Unable to add an item to the current keychain.
    Message: The user name or passphrase you entered is not correct.
    I never need a user name neither passphrase to store a new entry in the keychain.
    Steps to resolve:
    1. Restarting app: no good
    2. Repair disk permissions: no improvement
    3. Verify disk: no errors found
    4. Verfify Keychain First Aid menu from with Keychain.app
    Verification started
    Checking keychain configuration for User Name (user ID=501)
    Home directory is /Users/shortname
    Checked login keychain
    Checked password for ~/Library/Keychains/login.keychain
    Checked settings for ~/Library/Keychains/login.keychain
    Settings for ~/Library/Keychains/login.keychain may cause the keychain to be locked
    Current values: lockOnSleep=no, autoLock=never
    Checked default keychain
    Checked keychain search list
    Checked contents of ~/Library/Keychains/login.keychain
    Checked contents of ~/Library/Keychains/MicrosoftIntermediateCertificates
    Verification completed
    and a repair:
    Repair started
    Checking keychain configuration for User Name (user ID=501)
    Home directory is /Users/shortname
    Checked login keychain
    Checked password for ~/Library/Keychains/login.keychain
    Checked settings for ~/Library/Keychains/login.keychain
    Settings for ~/Library/Keychains/login.keychain may cause the keychain to be locked
    Current values: lockOnSleep=no, autoLock=never
    Settings corrected on ~/Library/Keychains/login.keychain
    Checked default keychain
    Checked keychain search list
    Checked contents of ~/Library/Keychains/login.keychain
    Checked contents of ~/Library/Keychains/MicrosoftIntermediateCertificates
    Problems successfully repaired
    Repair completed
    The First Aid Menu, option repair, solved this problem.
    Hopefully by documenting this, this helps another one who experiences the same error, in resolving.

    Daniel,
    Go ahead and Apply this note , it will fix your issue.
    Do you have a third column in AISUSER T.Code .
    This issue is fixed in ST : SAPKITL426
    Note 1140822 - SAP customer number for installation number &1 unknown
    Thanks,
    Uday

  • The online conversion of my pdf file to word did not correctly convert the tables and certain other formatting.  I wish to obtain a refund.

    The online conversion of my pdf file to word did not correctly convert the tables and certain other formatting.  I wish to obtain a refund.

    Hi yammyamm,
    I'm sorry that your conversion didn't work out for you. Please contact Adobe Customer Support via phone or chat, and an agent will be able to process that cancellation/refund for you. Here is the contact information: Contact Customer Care
    Best,
    Sara

  • Why does 'User not registered for online use' show up when I try to import a cd into itunes. None of the cd info shows up either

    Why does 'User not registered for online use' show up when I try to import a cd into itunes? None of the cd info shows up either.

    Well, the format I upload from the camera is "video clip" or "video for Windows"...sometimes I've converted them to avi format, too. But as I said, it never even lets me get that far...I never get to even select a clip. As soon as I tell the program to "import/clip" it freezes up before I can even go to the folder that the clips are in. It has only begun to do this recently, and I'd never had any problems like this before. Last night I tried it again, and I clicked "open composition", and it froze when I did that too.
    I'm not sure how much more specific I can be about the details of the clips, since I'm positive it has nothing to do with the clips themselves...I'm running Windows XP, though...Home Edition Service Pack 2, Pentium 4 CPU 2.80GHz, with 504 MB of RAM. I have had the automatic updates turned on since I did my last reformat a couple of weeks ago. Could it have something to do with some kind of an update it may have done?

  • Importing CDs into iTunes - User Not Registered For Online Use

    I am on Windows 8.1 Pro using iTunes 12.0.1.26 and am trying import CDs into my iTunes library.  When I insert a music CD in the album information and track names don't come in automatically.  When I try to manually get the information, I get an "User not registered for online use" message. 
    Request if I can be provided with some assistance on this. Importing CDs was no problem until I updated to iTunes 12.0.1.26 yesterday morning.
    Thanks.

    Same issue - windows 7.  Worked fine yesterday - updated to iTunes 12 and now it is broken and I get the "user not registered for online use" ERROR.  Seems like the latest "upgrade" broke GraceNote access.

  • My gmail says I cannot recieve mail because my user name or password sure not correct they are correct what should I do

    Subject
    My gmail says I cannot recieve mail because my user name or password sure not correct they are correct what should I do

    setting>mail>click on your gmail account>delete account> add account> re add your gmail account

  • When I load cds i get a message that states, "User not registered for online use." This problem has only begun since the new itunes update and is only a problem on my pc laptop.  Media content (track names, etc.) do not load.  Thanks

    When I load cds i get a message that states, "User not registered for online use." This problem has only begun since the new itunes update and is only a problem on my pc laptop.  Media content (track names, etc.) do not load.  Thanks

    See  Re: itunes 12 track names not found and user not registered for online use.
    tt2

  • I keep getting ' user not register for online ' when trying to get track names for my CD imports

    Please help, I am unable to import any CD's I keep getting "user not registered for online use"
    I am running Windows Vista, Itunes 12.
    I have attempted Repairing & re-Installing, but still having a problem, Any advice please folks.

    See this thread: Re: itunes 12 track names not found and user not registered for online use.
    Some extra cleaning may sort things out.
    tt2

  • I keep getting ' user not register for online ' when trying to get track names for my CD imports for Windows 7

    I keep getting ' user not register for online ' when trying to get track names for my CD imports for Windows 7 and I'm unable to find a solution.

    I can't be certain exactly which steps are going to be needed in each case, but if you work through this in sequence hopefully one of the steps will prove effective.
    First try this:
    With iTunes closed.
    Press the WinLogoKey+R
    Type in %appdata% and press return
    Double click on Apple Computer
    Double click on iTunes
    Delete the file CD Info.cidb
    Start iTunes and try again.
    If that doesn't work close iTunes and try deleting com.apple.iTunes.Gracenote.plist in the same folder.
    If that doesn't work close iTunes and try deleting iTunesPrefs.xml. This will reset your some of your preferences in iTunes so be sure to check them and reset as required.
    If that still hasn't resolved things close iTunes and try deleting the entire %appdata%\Apple Computer folder or look for parallel files/folders in the C:\Users\<User>\AppData\Local or C:\Users\<User>\AppData\LocalLow in case a corrupt file is persisting there.
    Note that any iOS device backups are stored in the MobileSync folder within Apple Computer. Once things are working you should backup your devices again as soon as possible.
    Or it might not be the preference files after all...
    For general advice see Troubleshooting issues with iTunes for Windows updates.
    The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
    Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
    tt2

  • I can't download track names in iTunes for Mac and get a "User not registered for online use" error

    I have a Macbook Pro 13, OS X 10.9.5, and iTunes 12. When I rip a CD it says it can’t find the track names online. When I tell it manually to fetch them it says "User not registered for online use."
    On my other Macbook it works fine...

    You need to delete two preferences files in your user library.  The full instructions can be compiled from various posts in this topic: user not registered for online use  I use an older Mac with easy access to the user library before Apple did a mother-knows-best move and hid it in recent OS versions.

  • Online was not copied tothe ipod users ipod, what does it mean

    i bought a audiobook from itunes store ,but it wont sync to the ipod, all i get is a message saying online was not copied to the ipod users ipod, the audio book is on the computer ,but i cant sync the ipod, thanks wayne

    Not Charge
    - See:      
    iPod touch: Hardware troubleshooting
    - Try another cable. Some 5G iPods were shipped with Lightning cable that were either initially defective or failed after short use.
    - Try another charging source
    - Inspect the dock connector on the iPod for bent or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
    - Make an appointment at the Genius Bar of an Apple store.
    Apple Retail Store - Genius Bar                          

Maybe you are looking for

  • Proxy Activation - ECC 6.0 to SAP PI system

    Hi All, Our envirnonment - 1) SAP ECC 6.0 ( R/3 system) 2) SAP PI ( R/3 system) To  establish communicate between SAP ECC 6.0 to SAP PI ( R/3 system using proxies )- we have setup following steps on ECC 6.0 system- 1) Created a HTTP connection in the

  • Disable all the foreign keys in a database

    Hy, what sql to use to disable all the foreign keys in a database and how to enable all them again. Thanks

  • Using dll in labview realtime

    Hi to all, I would like to know the best way how to open a file DLL in labview. I  created this dll with matlab, real time-workshop, nidll.tlc after that I have to use these dll in a real time VI, for using that into a cRIO,does it exist a tutorial i

  • N95-battery indicator

    im just upgrade to latest version V21... i realise the battery indicator gone crazy. it does not show the exact value. ex:if i got 4 bars..when answer the call, its suddenly gone. nokia should give us better upgrade. not a bug. please improve.

  • Restricting users from Creating Request in OBIEE

    Hi, I want to restrict users fron creating request, in the Manage Priviledge section i was not able to find the where i could restrict the user from *"Creating Request"*, so is it possible to restrict users fron creating request if yes from where. Re