Network Access Control

Here is my config:aaa new-modelaaa group server radius RADIUS_AUTH server xx.xx.3.11 auth-port 1645 acct-port 1646!aaa authentication login networkaccess group RADIUS_AUTH localaaa authorization exec default group RADIUS_AUTH if-authenticatedaaa acco...

Hello everyone,I am having a problem getting an ASA running 8.3 to authenticate an SSL VPN directly against an LDAP on Windows Server 2003.  I have changed the read access on the Active Directory to allow Annonymous to read it.  I think I am missing ...

HiAs far as I know there are some methods to pack radius VSA attributes. Here are:As the part of Cisco-AVPair26 - VSALength9  - Vendor ID1  - Vendor Type (Cisco-AVPair Attribute ID)Attribute Name=ValueIn the Vendor Specific attribute ("throught attri...

I'd like to know if there is a way to exclude passed authentications for a specific username from reporting in the Authentications-TACACS and Authentications-RADIUS reports?We have a few usernames that are used in scheduled jobs.  We only need to kno...

Tyring to use the "File Operations" option to import hosts into ACS.  I go through the wizard and click "Finish", the pop up goes blank and just hangs there.  No errors are genereated.  Anyone ever come accros this?

Has anyone successfully integrated the Cisco ACS 1121 with 5.1 and AD and been able to use multiple policies to permit or deny access to different NDG?  I am able to authenticate agains AD but I am having an issue with getting the policies to use the...

Hi, I am trying to authenticate Remote VPN users via LDAP and integrate this with "Dial-in" Permission attribute of user account. It works fine for a single domain with the following conifguration.aaa-server ldap-server (Inside) host 10.10.10.1 ldap-...

I have an ACS Solutions Engine that is performing TACACS authentication for remote access to Switches and now want to add 802.1X support for port based access control against the ACS server also.  For some reason this is not working for me at all.  D...

Hi, we are trying to renew an ACS 4.2 certificate issued by Windows 2003 CA, but now we have a Windows 2008 CA on R2 Standard Edition.Do you know any issue about it ?It seems ACS cannot see the new certificated issed by windows 2008 CA.thank you in a...

I am an IT auditor at a firm and have read only access to ACS %.1 server. Can some one guide me as to how can I get the names and dates for all the users that have been added to the ACS server by the admins ? I have been pouring over the Reports and ...

Is there a way to configure an email notification for a specific authentication failure?  Specifically, I'd like to see if I can have an email notifcation sent to me when failure reason is "13017 Received TACACS+ packet from unknown Network Device or...