Network Access Control

Hi !I find option for configure beavior of the ACS when expired password was'nt changed for a specific user, but were are defined the other lifetime password option maximum and minimum password lifetime ?  I had find for administrator user of the ACS...

Hi,can someone help me to double check this:If use this procedure: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacsapp/install/admap.htm#1038722 to reset the console password of my ACS appliance will I lose any configurations?I o...

Hi !I curently working of deploying ACS 5.1.0.44 to authenticate administrative session on our telecom devices.  In version 4.2 I had the possibility to have in the log from wich IP address the administrative session is attempt.  I had also able to p...

Hi !I would like to know what is the purpose of enable password option in the user indentity form on ACS server version 5.1.  The only possibility was to have a personnalized enable password per user, I had defined a specific password for one user an...

Hi,Please i need help!!!I got 10 switches C2560 and one core switch 3750G, i want to implement dot1x port authentication.I want the authentication validated with EAP/Radius ( Windows2003).Question:Do i have to to implement dot1x on all C2560 switches...

Hello,I have a PIX 515E running Cisco PIX Firewall Version 6.3(5)123. I am looking to have Management users connect to the PIX with their Active Directory credentials to manage the PIX. I have been successful in configuring this for all my switches, ...

Hi All,Does ACS have any way of saying "If a user is authenticating to deviceA, use externalDB1 for the password, but if they are authenticating to deviceB, then use externalDB2"?An example of how this is practical is that our security policy dictate...

I have attatched the config for my lab router in its entirety.  The lab is air-gapped so I'm not scrubbing anything from its config.  I configured some example server groups, and the servers are dummy servers to force a failed connection so that my u...

Hey guys,I am trying to configure 802.1x on the switch and authenticate users against a Radius server. My radius server is FreeRadius running on Redhat. The authentication works fine but the switch just doesn't take the VLAN assigned by the server. I...

Hi,We would like to run the following scenario: Cisco VPN client (or Any Connect, Cisco SSL VPN client) ----> Cisco ASA 5520 -----> Cisco ACS 4.2 -----> CAT Authentication ServerThe CAT Authentication Server is a Radius Server.How do we configure the...

All,I designing an FCAPS solution for my client and I have a few questions about authentication via interal DB vs external DB.Can ACS be configured to do authentication via external DB first and fallback to the internal DB if the external DB is unava...

Hi all,I have a cisco ASA 5505 which uses an LDAP AAA Server group as a user database.My question is, by denying Dial -In access in Active Directory, or by controlling access using Remote Access Policy, will the ASA accept/deny logons? or do I have t...