Network Access Control

We have a 5400 plataform configured with Radius Accounting and I am seeing that the attribute 8 (Framed-IP-Address) appears only in the Stop message.The cuestions is...how i can to do that the attribute 8 will be included in the Start message too?Reg...

We have a Cisco 7206(IOS12.2(33)) equipment associated with freeRadius server2.1.10.  Upon PPPOE client start, dynamic IP is assigned from the IP-Pool to the PPPOE client. However this IP address, is not included in the Frame-IP-Address AVP sent in t...

DudesWe had problem in replicatiing database to secondary ACS (4.2) server, Somehow I've managed to fix the issue by changing firewall inspection and shared secret.Now I've got new issue with "command authorization failed" after successfull authentic...

Hi group ,help me with the following aaa commands1)aaa authentication login default group tacacs+ nonedoes it means if my tacacs server fails , the user will be authorized immediately (no authorization done ) as the next method list is "none"2) aaa a...

I have IAS running on Windows Server 2K3 with a WLC 4400 controlling several APs.  What I would like to accomplish is this:WLAN 1 - For normal domain users, radius profile set to match on Windows Group Domain Users.WLAN 2 - For Executives, radius pro...

HelloI've been trying to set up my ACS to perform a backup but I'm having some trouble:I set the repository:repository tftp  url tftp://10.40.1.102/I run the backup:acsbackup config-ACS repository tftpFailed to perform ACS backup: File transfer error...

New CUWN - WLC/WCS/ASC - Intention is to allow each student in a dormitory to authenticate to the wireless network with a maximum of (3) devices… i.e Wii, laptop, iPad… additionally limit the bandwidth per device or per user. Will the combination of ...

Hi allRouter- 10.10.10.1ACS-10.10.10.2AD-10.10.10.3in AD - created  a group called "telnet users" - added user with name of - johnI have added cisco router as clients in Cisco ACS 5.1 and integrated with Active directory. when i telnet to 10.10.10.1 ...

Hi, I am not able to see option 26 (VSA) under Radius IETF.I can see the rest except for the VSA. I need to enable this as I am configuring non Cisco AAA client which is SonicWall 2040 Firewall.Any Idea, pls advise.Thank you

I am facing issue for 3com router with acs.I am able to login to 3com router through my tacacs ID, but for enable password i need to use local password.is there any solution on this i want my both password should TACACS only.my acs using windows user...

Fresh install of a ACS5.x appliance.I can login to the Web interface using the credentials i created in setup, however when i attempt to SSH into the device it doesn't like those same credentials.  Not having much luck with google today, ideas?

Hi ,I configured the microsoft ldap authenticaon for vpn user in asa when i do test from asa to microsift ad/ldap i get  on  below errorauthentication test host to x.x.x.x failed .following error occuredERROR :authentication server not responding .AA...

Hi,we have a Nac enviroment with users that are defined on the ACS. Also the groups are defined on this machine.The problem is that we have to move all the users from the ACS to the domain controller, so all the users will become AD users.In which wa...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5...

Hi experts,i'm trying to accomplish the following:People using wireless notebooks connects to a AP --> WLC4402, EAP-PEAP Mschapv2.Nac infrastructure is in use, single sign on.The ACS use an Active Directory External Identity Store.People who should b...