Network Access Control

Hello,I have EzVPN configured in routers and asa5505 as a client and ASA5510 as a server, but I can not get through aaa authentication (accounting & authorization too) in both cases, and snmp on the asa5505 case.Traffic between LAN behind router and ...

Hi,I'm having some issues on implementing radius accounting. Below are my configurationsaaa group server radius ClearBox server 192.168.111.8 auth-port 1812 acct-port 1813 accounting accept ClearBox!aaa accounting exec default start-stop group ClearB...

...

I want to restrict access to 6500 ports to known MAC addresses. I know I can't use port security, nor can I apply an MAC layer ACL to the port, so I'm going to try 802.1x and/or MAC authentication bypass.There is a potential for hundreds of MAC addr...

Since I upgraded to IE 8, trying to admin the ACS GUI is very frustrating. It acts as though I am on a dialup connection. Could it be IE 8, or the version of Java running? What is the recommended Java version to use with IE8 and 4.2 ACS?

I just need some input from anyone who has configured ACS. I distinctly remember be able to change my ACS password from a router or switch by entering a blank password with my users name. Is this option still available in the current ACS 4.1 or 4.2...

I am looking for help on what happens with the below example if the TACACS server fails and you try to console into the device. I am assuming that the next order would be "aaa authentication login line-only line" but I'm not understanding what the ...

Hello,I have 2 ACS SE boxes set up. One is the master, the other gets a copy of the DB via replication and is located in a different geographical area. I want failover for authentication and have installed the Windows agent on a server in the same ne...

I am trying to install a certificate for wireless PEAP. Everything work without errors but the peap do not work. When i look in the debug files, i see:"EAP: CTL initialization failed"Anybody came across this problem ?Our certificate authority is a Mi...

Hi there!!!I have a doubt about the installation of the appliance Performance Monitor 3.2.2. I have installed this tool in the same server as the Cisco Security Manager 3.2.1, with this license CS Mgr Enterprise Pro - Incremental 500, at the same ti...

I use tacacs+ for AAA in my Enterprise. On my ACSv4.1, I have created a user with privilege level 15. On every Switch in my enterpirse the user on authentication, directly goes to privilege mode (because he is level 15). But on ASA (ver 8.0) he is al...

I am using Secure ACS 4.2 Radius to authenticate ipsec vpn clients. There are two different groups of users with different downloadable ACLs and rights. I would like to set the vpn-idle-timeout to different values for each group. I have tried usin...