Network Access Control

I have setup ACS 4.2 and when I runrouter# test aaa group tacacs+ myuser mypasswd [ legacy | new-code]               Both options work fineBut when I try and login, over telnet, the request reaches the aaa server, but returns fail !My commands are :-...

Hi,(I am a bit new to some of the IOS Security features)Is it possible to "download" and ACL from TACACS+ (ACS 5.1) OR RADIUS AV Pairs ?       I know that the lists can be configured on ACS, but how are they applied on a IOS router ?I have read about...

Hello,I am having a hard time getting my cert to work right on the ACS for PEAP. I have acs 4.2 se.  I have a 3rd party .pem. certificate I have loaded it into the install acs cert as the cert file and private key. I have also loaded into the authori...

Hi all,I have configured a Cisco GSS for AAA using TACACS.The Cisco GSS is version 3.0(2) and the ACS server is 4.2(0) build 124I have a configuration storage application which connects to devices and download the configuration. This is working for a...

Hi,I Have ASA 5520 In My Network, Here From Inside Users Have To Access The Terminal Server Which Is Located In DMZ. If I Want To Access The Terminal Server From Inside Users It Has To Authenticate By AAA Local Database.

Hi, I'm evaluating ACS 5.1 with latest patch before a rollout but I'm having problems trying to retrieve groups from the AD. The ACS status is CONNECTED to the AD, and ACS appears as a computer in the AD, but if I try doing a search for groups I get ...

Hi,I´ve succesfully joined the ACS 5.1 Server to a Windows 2003 Domain. But no AD Groups are displayed in the selection box.Any suggestion?Thank You!GreetingsRouven

HiI need to copy all configuration (Users, Groups, AAA clients, you name it) from an existing ACS 4.1 appliance to a newly installed ACS 5.1 appliance. Is there  a way to do this without having to manually configure all items in the 5.1-GUI?Export/Im...

I am building a test setup with open authentication and i am trying to get the theory right.First the scenario for which we are going to use dot1x with open authentication:We want to deploy dot1x throughout our network, which includes a number of use...

I have found various articles that state completely different things about what can and cannot be done using Radius authentication on a PIX or ASA. Can someone provide me with a definitive answer on what my options are or point me to a good whitepape...