Cisco Cisco NAC Appliance 3390 Information Guide

Page of 17
Clean Access Manager FAQ 2
Document ID: 63593
Contents
Introduction
I would like to change the initial web page that comes up when I first try to access a web site before I am
logged into Cisco. How do I do this?
When the number of entries in the event logs passes the number configured in the Cisco Clean Access
Manager, are the entries removed from the database, or does the GUI only show the number specified?
When you try to upgrade NAC with 4.6.1 to 4.7.1 version, it is possible that you get the 
PCI: BIOS Bug:
MCFG area at e0000000 is not E820−reserved PCI: Not using MMCONFIG
 error
message. Why does this error occur and how can this be resolved?
I see the "500 Internal Server Error" message when the primary (active) Cisco Clean Access Manager fails
over to the standby (inactive) manager. The manager GUI never displays. How do I fix this?
In virtual gateway mode, can I re−tag all machines in a role (for example, Xboxes) and have them appear to
be on one network?
Failover Clean Access Servers do not appear to failover correctly. Both Cisco Clean Access Servers indicate
that the other is down. The primary tries to failover to the secondary but does not succeed. No new logins are
authenticated during this time. Why does this problem occur?
I need to develop a page where the helpdesk technicians can enter MAC addresses into the 'exclusion' table
for things such as printers, routers, game systems, and so forth. Is there a utility to accomplish this?
If the session timer is set to 0 for a role, and a user in that role shuts down the machine and goes home, comes
back in the morning and turns the machine on, is the user required to logon again?
I have ensured that the Nessus scan plugin 11011 SMB on port 445 is unchecked but still shows up in the user
scan report. Why is this?
When I perform a failover, I see the 
DROP DATABASE
CREATE DATABASE
, and 
pg_restore:
[archiver (db)] could not execute query: ERROR: Cannot create unique
values
 log messages in /var/log/messages or /var/log/ha−log. Why is this?
Can the Cisco Clean Access Manager database be queried remotely through SQL?
How do I perform a manual database backup?
How do I recreate the database?
How do tell if the services are running?
What filters do I need to configure for Xbox Live?
I uploaded some jpgs and html pages to be used for the right frame of the Login Page using frames. Where are
the files and how do I reference them?
I configured bandwidth management for the unauthenticated role, and my connection (or the Cisco Clean
Access Manager) to the Cisco Clean Access Server is now very slow and it occasionally times out. Why is
this?
How do I find the number of users per OS logged on?
Does CAM support EAP−TLS or EAP−TTLS authentication?
What does this 
[Failure] Error:"SNMP failure [1.3.6.1.4.1.9.9.215.1.1.5.0]:No
such name"
 error message occur in switch?
How do I add a Clean Access Server (CAS) into Clean Access Manager (CAM)?
Why does the "unable to read cert found in /root/.chain.crt NAC only handles RSA keys <= 2048
...java.io.IOException: subject key, Unknown key spec: Invalid RSA modulus size." error message appear?
When I try to save the running−config of the switch through SNMP, I get the 
failed to save the
running configuration
 error message. Why does this error occur and how can this be resolved?
What ports do I need to open between CAM and CAS, CAM/CAS and AD, CAS and NAC Agents?
Related Information