Network Access Control

Hi All, any one  has done the implementation of command authorization with ACS.I want to create a command set in which user can only run show command which i specified and some command in configuration mode like assigning vlans to switch ports.I have...

Hi, I have following issue. I am using an  OpenLDAP server to authenticate IPSec VPN Client users. It works to authentivate against an OpenLdap server.  But my problem is, that I want to have two different Group Policies depending on the LDAP group u...

Has anyone found a good way to migrate users/groups from ACS on Unix(2.3.6) to ACS on Windows (3.3)?

Hi Guys,I am trying to setup authentication of VPN users using RADIUS.I have ACS version 5.0.0.21In first step I configured VPN using local database of users. Got that to work find.Later, I configured RADIUS server and runtest aaa-server authenticati...

Hi , How can i restrict show commands to the users by using Shell Command Authorization Sets also let me know whether i need to make any chanes on my aaa authorization configuration ??? below is my aaa authorization configurationaaa authorization com...

Hi all,We have ACS version 4.2 and have a weird database issue, I want to create a new external ODBC database for user authentication, I've successfully created a new DSN and ACS can see it properly. However when I try to add an exterrnal ODBC databa...

We are still running ACS v3.3.4.12.6/7 in several infrastructures mixed with 1111s, 1112s and 1113s.  I know, we are out of support.  We have some of our upgrades in hand and will be starting soon.  We have almost 40 of these appliances in 5 differen...

Hi,have a little problem. I`m able to connect via Clientless SSL VPN but after login i see no portal page or web apps.... it seems that a policy not work? Any suggestions?I don`t know why but only the DefaultGrpPolicy seems to work for the profile au...

Hi ALL!!!I want to authenticate mab users which are my ip phones with mysql database.My mysql database was filled with mac adddress by means of mac notification feature. Havig read the User guide for ACS i created procedure in mysql that was applied ...

Hello,we have a new acs appliance (1113) with version 4.2.1.15 and we want to authenticate user through ssh from routers with ios xr software. unfortunately this doesn't work.Here ist our configuration of the router:##################################...

Hi All,I have an cisco ACS v5.1 and also a cisco NAM.  Currently, I have configured TACACS+ on the NAM and the ACS v5.1 however  when I try to access the NAM, the ACS v5.1 has an error message of "TACACS+  authentication ended with error" and I am no...

Hi All, Can any one guide me to configure 802.1x with acs 5.0. Its totally new look and m not able to find document related to 802.1x.Thanks

Hi,I currently trying to set up replication between two ACS servers (installed on windows) both running software version 4.2.1.15.The replication completes ok (as shown in the logs on both servers), but the replicated config is not showing on the sec...

Preface: the task was to come up with a new router script to be used on all of our sites worlwide - a basic script covering:- AAA (Tacacs+)- Logging- Security (Base line)- Optimize memory (router - of course the valuse are different on some routers d...

I have set this command:aaa authentication login default group tacacs+ local.I can telnet to the switches using my domain logging credentials but I have to use the enable password configured on the switch. How can I set this up so that I use domaine ...