Network Access Control

Hi all,we are running ACS 4.2(1) Build 15 on a Win2003 member server and use the ACS for EAP-TLS with certificates (Microsoft-PKI) for WLAN authentication (WLC 4402, 6.0 and 4.2). We are using both machine and user authentication.Sometimes machine au...

Hi Guys,I'm trying to configure the RADIUS Authentication in IOS 12.0(5.1). However, even though I can configure the aaa new-model and use local username and passwords, I seem unable to find the necessary "radius-server' commands. Is it that RADIUS S...

Hello,i have installed the the ACS 5.1 on our VMware Server 2. After the basic configuration, i should be able to connect to the web interface.if i enter the correct address i get an 404 HTML status error code.So I'm trying to solve the problem.i cal...

AllI am working on setting up a restricted command set on ACS 5.1 so that users can access swicthes only at designated privilege levels and hence only get access to certain commands as defined on the ACS servers.So far I have set up a Shell Profile w...

I'm evaluating ACS 5.1 for a future deployment. I'm trying to get authentication working for IOS devices using AD groups. Ideally I would like to be able to say this AD group has access to level 15 when logging into IOS devices and another group has ...

Hi experts,I'm trying to configure my 3750 switch to authenticate phones and laptops separately on Voice and data vlan. Here is my config:aaa group server radius FreeRadius server 172.17.1.1 auth-port 1812 acct-port 1813!aaa authentication dot1x defa...

Hi,I am using ACS 5.0 for TACACS+ Authentication and Accounting.I am facing an issue related to reports.When I click the detail for any failed / passed authentication entry on AAA Protocol > TACACS+ Authentication page, The remote address (under user...

Hi All,From the ACS 5.1 CLI (5.1.0.44.4 to be exact)....Can someone please explain the difference between "acs backup" and normal "backup"? (other than one backing up the ADE-OS data?)The ACS command reference does not explain the difference clearly....

I want to be able to set upread only access to one of our cisco routers while letting the other users still be able to get into enable and config mode.My current config ( without the read only access user) is as followsaaa new-modelaaa authentication...

Morning Guys,I'm in the process of migrating all my switches and routers to a RADIUS based Solution. Can I also include my Aironet APs to authenticate administrators against the remote RADIUS as oppose to the local RADIUS?ThanksNik

Hi Folks,I am currently deploying the Cisco ACS (ACS 4.2.1.15) with RSA Tokens.Please let me know the scenario or best practices for this kind of delpoyement.1) My Cisco ACS Server (Windows Based) is currently intergrated with MS AD.2) I want to Use ...

I have cinfugured 802.1X with the following componentes- Windows Server 2003 AD with enterprise CA- Cisco Secure ACS 4.2 like Server AAA, Setup to use EAP-TLS authentication with Machine Authentication.- Win XP SP3I tried to authenticate the machine ...