Tks - I think my ACS setup was badly screwed. I restored the system from another ACS backup and it functions now and respects NAPs.
On Sat, May 14, 2011 at 11:55 AM, Kingsley Charles < [email protected]> wrote: > Did you enable debugs and check, if the request parameters sent is matching > to that defined in the NAP matching criteria. > > > With regards > Kings > > On Fri, May 13, 2011 at 9:52 PM, Richard Chan <[email protected]>wrote: > >> Hi, I can't seem to get NAPs to work on my ACS. >> ACS is bypassing by NAPs and always using (Default) to validate users. >> >> Is there a switch that needs to be turned on? >> >> >> I have created a NAP, R3, with the NAF 3.3.3.3 (R3's loopback address). >> I disable global authentication with " Deny access when no profile >> matches". >> >> I would expect the the logs would show the NAS using the R3 NAP to >> authentication users >> Yet when I test with >> >> test aaa group radius myuser mycisco leg >> >> the logs always show success but using the (Default) NAP. >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
