Network Access Control

I've setup a group on tacacs server called acsrestricted and mapped it to AD security group. I've set this group to privilege level 7 on tacacs server.I need this group to view the "show run" config on a router. Privilege level 7 allows the user to u...

HiHas any budy seen somthing similar on an ACS v5.2-Patch6 after upgrading to Patch6?TEST/admin# ssh delete host server01.domain.local6 [5543]: utils: vsh_root_stubs.c[569] [admin]: validate_ip_address_or_hostname - identified a valid ip address or h...

Hi,I have configured acs 4.2 in windows server machine, everything is working perfectly, users are authenticating from AD. Issue is that when uses is connected with any machine either from PC or laptop or mobile then it is not be able to connect agai...

HiIn Cisco ACS 5.2 I have two groups. Group1--Full access groupGroup2--Read only groupI would like to block following commands for group 2 which is ready only users. These user group has access only till EXEC mode and they are able to run all show co...

Hello,I set up a user with privilege level of 15 and enabled aaa local authentication on the vty line. This only problem I am having is that once I try to log to the router via ssh I get prompted fro username and password ( this is normal) however I ...

Hello. Our ACS 5.2 is authenticating ASA VPN users with Radius. I would like to use the ACS to authenticate ASA administrator logins with Tacacs. When I modify the ASA Network Device by checking the Tacacs box in addition to the Radius box, ASA VPN a...

Hi guys my problem is about Radius.It can not assign ip to remote host.This host request ppp and it terminated by on our Cisco router(LAC-LNS).And Cisco router uses AAA for authentication and ip assignment.Authentication part is okey.The host can con...

Hi,We having ACS version 5.2 0.26 with Active/Standby. We need to integrate active directory with ACS. Domain name given by Server team was as xyzcompy.local. When I tried to resolve the same domain name I got five servers ip address against the same...

We have an issue with View db (Monitoring & Reports) backup on ACS, version 5.2.0.26. We have scheduled incremental backup daily and full backup monthly. Everything has been working well, but since yesterday following errors have appeared, and full a...

Hi Cisco Team,I would like to authenticate my old Cisco switch, C2950, Version 12.1(22)EA4 with radius server NPS (W2008R2).This configuration is ok for all other equipment (C6500/C3750/C3560/C3550/C2970).Configuration AAA on switch C2950:___________...

Hello,Is it possible to use wildcard (*) or regexp in ACS 5.2? For example, I would like to create an End Station Filter that would match when the DNIS is *somethingThanks

Hello,I have a question. What is the requirement of integrate ACS 4.2 Appliance and AD about CA server? it has to be windows 2003 server enterprice o windows 2008 enterprice? or it can be windows 2003 and 2008 stand alone? another question is about m...

Hi All,I just want to know if i need to support High Availability in Cisco Secure ACS 5.1 appliance, will the base license suffice or do i need to buy Security Group Access System License/ Large deployment License. Again, do we require license for ea...

Hi All,     I have a ACS 4.2 under windows, I setuped it to authenticate routers by RADIUS and TACACS+  protocols. now I have some devices whitch know only LDAP protocol. How can setup ACS as a ldap server to authenticate those devices?>