Network Access Control

hi,Im working on AAA authentication for an ASA (ASA 8.0(3) version) box thorough a TACACS+ server in ACS (4.2 version). The setup im working on includes several users in 3 classes: senior (privilege level 15), junior (privilege level 7) and monitorin...

Hi, I have a situation I am not sure how I should implement it, I need some help to better understand how certificate authentication for IPsec works.ASA has SSL certificate signed by well-known third party, trustpoint of this third party CA, certific...

hi,I test ACS 5.1 and have some questions to be answered  General concept suits me well (service policy, access policy and so on). Its very flexible but what Im looking for right now is the way to assign privilege-level attribute only to specific use...

Is there a 'create date' attribute for an ACS user? A typical question auditors will ask us for is a list of ACS/Remote access users created since 1st Jan 2010?Thanks,Brian

An ASA5550 will need to be configured to use TACACS AAA. Currently, the ASA is setup for local authentication. A couple of privilege 15 admin users and a few more privilege 5 read-only users.ASA 5550running ASA 8.2(2)using ASDM 6.3(5)authenticating t...

Strange problem I hope someone can shed some light on. I have lost the ability to format/sort/etc. in interactive viewer mode. The only operations I can perform are alignment and font. I have tried resetting reports to system default. I have also app...

Hello all,I am trying to configure Dot1x authentication using ACS 4.2 and Active Directory but am coming up short on how to configure the ACS for this.  Can anyone point me to a howto or otherwise assist?From what I understand, when using AD I need t...

Dears ,I have a case where I need to authenticate my wireless users through RadiusI can do NAT and DHCP on the Wireless AP ,but there is no Radius authentication supportedIs it possible to place a router after Wireless AP and make radius Authenticati...

HiI am trying to authenticate dial in users on ACS 5.1I see from the feature comparison that ACS 5.1 Windows dial in Support is not supported.  Does this mean that dial in support is not supported via Windows authentication, i.e AD authentication ?  ...

We have implemented AAA on all our internal switches, and all is working well.. primary login is sent to ACS server, and if unavailable local credentials are used.  The one exception is out 6509 VSS switch.  If you SSH the switch all is correct, howe...

Hello,We just migrated to ACS 5.1.With the old ACS I was able to set Account expiration dates, so Accounts automatically were set to disabled if the configured date was passed.I just can't find that option with the new ACS 5.1? We use Local Database ...

When I log into the 4500 switch with my domain account, I get priv 1 only and have to “enable” with the local enable password to get to priv 15.  How do I set this up to get directly to enable? The ACS 5.1 is setup with a authorization/shell profile ...