Network Access Control

I am trying to configure a 3750 switch for AAA?  Telnet and SSH work fine but CNA and HTTP is not working.  Both SSH and Telnet need to authenticate using RADIUS but CNA/HTTP needs to authenticate using a local account because the local administrator...

I must be stupid.I have an external LDAP server, (like openldap, but it is an old netscape one).I can't authenticate against it.  I can anonymous bind against it. but that is it.I don't want groups or any attributes.  I simply want to say User X pass...

I'm trying to configure a timeout for network connection, but when it suppose to disconnect client, it's not working.  Is it possible to do this??Only works when the client is connecting and is denied if the time is not valid.  But how could I do thi...

I am wondering is it possible to accomplish following scenario.I want to authenticate users connecting to my network using 802.1x based on Active Directory, but to be able to put users from external database (AD) to different Vlans based on some spec...

Looking to fine tune Cisco IPSec client RA-VPN authentication on our ASA-5510. Currently using NT Domain authentication. It's been working fine for quite a while but is too broad a brush. It authenticates anyone who is in the domain. We need to o...

I want to apply an authorization profile depending of the login username used, like assign the VLAN ID, so on a lab I created 2 rules, each of them using the System:Username field and then apply the Authorization profile with the correct VLAN to the ...

I have ACS 1131 with 5.2 version software.Can this be configured as a VLAN Membership Policy Server for dynamic vlan assignment in the switches.If possible, Can anybody provide me the configuration steps or ideas.Thanks & Regards,Lenin S9620745656

I am configuring ACS 5.I have group in AD created. There is 2 users in the group. Usera are from different OUs.One user get authenticated.The other failing to get trough authentication with following error:24463 Internal error in the ACS Active Direc...

Hi All,Is there a way that the IP address of the client workstation connecting via SSH to a cisco can be captured and sent in the RADIUS Access-Request packet?Thanks,Phani

Hi I've noticed a strange problem I think it's quite recent but cannot highlight what may have caused it.I am unable to login to the console port on all devices that ive currently check on my network. I can SSH no problems.I hit return when asked and...

Hello together,i have a wireless deplyoment with WLC 5508, ACS 5.2 and several AD connected by LDAP. It is required that users are authenticated by certificates additional the user should only get access to the wireless environment when the user is f...

How does the NAP server check for policy compliance if the device requesting network access doesn't have an IP yet? I understand that the NAP server can authentic the user through the switch via dot1x (layer 2) but, what about policy compliance?Thank...

Hi friends,I have a question about my ACS redundancy deployment. I bought three ACS all of them came with base license. but i bought large deployment license my question is necesary to buy the large deployment license to add two seconday ACS to my Pr...

hi! is there anyway that i can authenticate user login thru Microsoft AD/IAS to the cisco switch/router without using Cisco ACS or any paid solution? Thx