Network Access Control

Hi All,I'm having trouble with a Cisco ACE 4710 appliance using tacacs to authenticate ssh/telnet remote users. Following the CCO documentation we have configured the backend tacacs server (Cisco Secure ACS) and setup the ACE with the required config...

Hi All,    I am attempting to use PEAP with a LDAP backend on FreeRadius witht he MS Supplicant.  I have it all working, in debug on the Radius server I see it sending all the information, the tunnel, medium etc. but with PEAP the Cisco switch is not...

Hi All,I have multiple level of network users and they have different different access to network devices. Like for L1 netork engineer they can login to access switches and can change only vlans on ports and see output of some show commands.same way ...

Hi All,I have integrated ACS appliance with active directory and mapped the domain users active directory group to a ACS group. Now I am seeing that users can user their active directory user name for logginng to network devices.How can I block them ...

HiWe are using the ACS 4.2 Appliance as the Primary AA and a Win 2003 server with ACS 4.2 on as Secondary.Last time we tried a fail over test by stopping the services on the Primary, no new clients could connect to the Wirelss Network, as the applian...

Hi,I have task ACS 5.1 installation and configuration.So far , i worked on ACS 4.2 but this is somwhat new and i am keen to know about this configuration . Based on that I refered some cisco links but still i am not able to get proper info.I would li...

I want to use SBR (Steel Belted Radius) with return list attributes for limiting access to Cisco WCS. Documentatio for Cisco WCS mention to use vendor specific attributes for user roles with simple example. What I need is one dictionary file in VSA f...

Hi,have anyone tried to upgrade from ACS 5.0.0.21 to 5.1 version, if any one successfully upgraded please share the steps,I am following the cisco website installation and upgrade guide but no luck., when I upgrade from TFTP, sh ver shows the same ol...

Hi Experts,I have requirement to create multiple users with different level of permission. Requirement is user with low permission can only execute following commands and no other commands:"show interface fastether1/3""show ip ospf neighbor""router o...

Hi,Can some body help me out solving this issue.I have cisco 3800 configured for tacacs+ authentication.below is the config.========================================..aaa group server tacacs+ CSCS server 172.17.17.10aaa authentication login default gr...