Network Access Control

AllI am working on setting up a restricted command set on ACS 5.1 so that users can access swicthes only at designated privilege levels and hence only get access to certain commands as defined on the ACS servers.So far I have set up a Shell Profile w...

I'm evaluating ACS 5.1 for a future deployment. I'm trying to get authentication working for IOS devices using AD groups. Ideally I would like to be able to say this AD group has access to level 15 when logging into IOS devices and another group has ...

Hi experts,I'm trying to configure my 3750 switch to authenticate phones and laptops separately on Voice and data vlan. Here is my config:aaa group server radius FreeRadius server 172.17.1.1 auth-port 1812 acct-port 1813!aaa authentication dot1x defa...

Hi,I am using ACS 5.0 for TACACS+ Authentication and Accounting.I am facing an issue related to reports.When I click the detail for any failed / passed authentication entry on AAA Protocol > TACACS+ Authentication page, The remote address (under user...

Hi All,From the ACS 5.1 CLI (5.1.0.44.4 to be exact)....Can someone please explain the difference between "acs backup" and normal "backup"? (other than one backing up the ADE-OS data?)The ACS command reference does not explain the difference clearly....

I want to be able to set upread only access to one of our cisco routers while letting the other users still be able to get into enable and config mode.My current config ( without the read only access user) is as followsaaa new-modelaaa authentication...

Morning Guys,I'm in the process of migrating all my switches and routers to a RADIUS based Solution. Can I also include my Aironet APs to authenticate administrators against the remote RADIUS as oppose to the local RADIUS?ThanksNik

Hi Folks,I am currently deploying the Cisco ACS (ACS 4.2.1.15) with RSA Tokens.Please let me know the scenario or best practices for this kind of delpoyement.1) My Cisco ACS Server (Windows Based) is currently intergrated with MS AD.2) I want to Use ...

I have cinfugured 802.1X with the following componentes- Windows Server 2003 AD with enterprise CA- Cisco Secure ACS 4.2 like Server AAA, Setup to use EAP-TLS authentication with Machine Authentication.- Win XP SP3I tried to authenticate the machine ...

Hi. I have a customer who wants to perform 802.1x machine authentication only to prevent users connecting there own devices to the corporate network. The machine credentials will be authenticated via Cisco ACS which will proxy the authentication to A...