topic Re: CSACS capable of dropping lines and users? in Network Access Control

CSACS capable of dropping lines and users?

dehghan — Sun, 10 Mar 2019 23:02:02 GMT

Hello

Is Cisco ACS capable of dropping users logged in vthrough a NAS. I have seen a purge option but I dont think this does the trick. I am looking at dropping a specific user from the CSACS ineterface.

Also is it capable of showing what password has been entered by the user while logging in for troubleshooting purposes?.

Thanks

Re: CSACS capable of dropping lines and users?

Farrukh Haroon — Sat, 16 Aug 2008 20:00:36 GMT

You mean passwords 'modified' (like enable/HSRP/Tacacs key etc) after logging into the device or passwords entered to login INTO the device itself?

The first one can be logged/accounted for by using command accounting (requires NAS to use TACACS+ and not Radius). The second case is logged in the ACS >> Reports >> Failed Attempts.

Regards

Farrukh

Re: CSACS capable of dropping lines and users?

dehghan — Mon, 18 Aug 2008 05:00:03 GMT

For the first one I mean dropping an already logged in user User on an Async line. (Perhaps resetting the line on the NAS from CSACS).

for the second one I mean actually seeing what the user has entered for his/her password while he/she was logging in, to verify if she is entering a wrong password. (CSACS only gives me a general password incorrect message but I want to see what the password entered was.)

Thanks