Network Access Control

Hi,I have PEAP-MSCHAPv2 working with user name, but can't seem to get "machine authentication only" working. I need to logon to the domain using username and password before it is 802.1x authenticated. I want 802.1x to authenticate using only machine...

Hello,I am about to implementing dot1x in our LAN. I understood that I have to use multi-domain mode to get this work well ifI use ip phones and PCs attached after the phones.I have Avaya 4600 phones which only supports EAP-MD5 authentication.In Avay...

I know this has been asked in a few different ways but I need to clarify the user experience under the following configurationMy ASA uses ACS4.2 as a radius server and it also provides downloaded ACLs depending on the users group within LDAPOur Secur...

We are having a bunch of SSL VPN users authenticating via Cisco ACS RADIUS. The ACS is getting the accounts from a LDAP server (Novell eDir). Is there some way to make password expiration work at the SSL VPN client?Rutger

I am trying to setup ACS 5.1 to pass the VSA attributes as defined in the NX-OS config guide, but I cant find TACACS+ VSA as an option in ACS 5.1, only RADIUS VSA.From config guide:"The Cisco TACACS+ implementation supports one vendor-specific option...

I'm in the process of creating command sets for read-only group and am trying to figure out how to create a command set that allows for all 'show' commands.How would one wildcard the argument to allow all sub-commands for show? Would you just use an ...

Hi,is there any example how to add/remove a internal host via python script, like you would do it via the GUI under "User and Identity Stores -> Internal Identity Stores -> Hosts" ?regardsDirk

Cisco Secure ACS - Alarm NotificationSeverity: CriticalAlarm NameSystem Alarm [Collector]Cause/TriggerValue too long (VIR-APP078, RadiusAccounting)Alarm DetailsPlease see Collector log for detailsGenerated OnTue Nov 16 20:20:29 CET 2010and collector ...

hi! Besides, ACS appliance....is there any cheaper option from Cisco or third party software/hardware that can allow me to manage the users/rights to the network equipments thru ldap? I do not need the feature to capture all the executed command log....