Network Access Control

I have Secure ACS 4.2 installed. I am using it for vpn access with Radius and tacacs+ access for network device mgmt. I want to setup multiple NDGs but have them all use the same ACS tacacs+ server. How do I do that? Each time I add a new NDG and...

I had started this conversation in the "General" area (I think incorrectly) so I'm going to post it in here as well (just in case - appologies to the moderators).In our aaa implementation we use tacacs with the local db as backup. Well, I'm trying to...

Hi I am presently using acs v4 is there any way that I could configure a device to authenticate using tacacs and radius to gether in acs ,

folksi'm having problems with one of my acs appliances - i suspects its giving out duplicate IP addresses to users and therefore causing vpns to faili only have 8 accounts but each one represents a department in my organisation and the departmental a...

Hello, I want to know if the following scenario is possible:VPN Client installed in a laptop that needs a digital certificate to login into a device. The idea is that besides username and password the laptop needs a certificate to access the network ...

I have an ACS 4.2 Server and an ASA 5540. I have setup AnyConnect SSL VPN on the ASA and want to authenticate users using AAA tacacs+ authentication with the ACS and an external Windows AD database. I have done this successfully. I also want to us...

Hi,I'm currently running a Cisco ACS v3.2 on a windows server 2003 Pro with a safeword token server. I'm using PEAP (EAP-GTC). The problem is my client(Windows xp Pro SP2) gets disconnected 1 or 2 minutes after he connects to the access point. I have...

I understand that this should be dictated by a security policy/risk assessment, but I was hoping to get some opinions on this.The ACS is behind the Internet firewall. We are going to place it on a LAN so that it can be accessible throughout all the ...

I am running v4.1(23). No command accounting is being logged on the acs server. Found a bugid that supplied a workaround, said cmd and system must be in packet. Tried this and it is not working. Is there any other options I can look at.

I'm looking for a solution for starting with 802.1X for wired and wireless network in a live environment. During the migration I have to turn on port based authentication. But at that moment, the machine must have a valid user / computer certificate....

Is there a way to determine how many active wireless users are on the network by checking ACS? Currently our users need to re-authenticate periodically (about every 15 minutes), however, ACS shows no logged in users. There should at least be one --...

Hello Everyone,I am haivng a problem with getting an ASA 5505 to suthenticate directly against a w2k domain. There is no radius server involved. I am using Kerberos. We are getting an errors message back stating that the clocks on the ASA and teh...

we have the vpn users authenticate using RSA token , & ACS configured with RADIUS token server as the in the selected databases for unknown user policy ,the problem is when we updraded from ACS 4 to Release 4.2(0) Build 124 a problem happened , so...

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?privilege exec level 15 no router????thx