Network Access Control

All, I have backed myself into a corner with a command I entered yesterday in my ASA. The command entered was:aaa authorization command TACACS+ LOCAL And it locked me down so tight that I can't even go into "conf t" or run a "sh run" command any lon...

I am encountering issues with speed when plugged into my ASA 5520....I have a 10MB pipe.....I can plug into my ISP's router and speed is relative Average.....9MB down and 9MB up.....When I plug in my ASA to the ISP router and plug in my laptop to the...

I was curious if there is a way in radius to set a banner that can be used by ever network device through radius. Radius attribute or something. We have a new security officer in and instead of changing it on every system i would like to manage it c...

Hi All, any one has idea how can I configure my network devices for aaa authentication if I am using 802.1x & accouting as well.. how the deives will be added in ACS..radius or tacacs+..any idea

Dual ACS solution (4.2) with one ACS doing the authenticating, the other acting as a standby. Recently when accessing nortel switches, they authenticate to both ACS, as some are going to ACS2 despite their primary RADIUS server being ACS1.The ACS sol...

Hi There, Any body has implemented 802.1x port authentication with ACS & windows AD. which authentication is supported in this kind of setup ms-chap or MD5 or PEAP (on the clients).and what are the challenges if windows user accounts password changed...

When I upgrade from an ACS from version 4.0 to version 4.1 statics users are saved but dynamic are not saved.This problem was detected in cisco? Is there a way to export the database from version 4.0 to be able to import a version 4.1.I have a big pr...

Hi All, can any body tell me what happens when a switch/hub is connected to a 802.1x port which is configured for guest vlan if switch does not receive 802.1x request on that port from switch/hub..all the pcs connected to that port will be part of gu...

Guys we have a ACS running and now i have to put another one as a backup while i was configuring it , it ask for password (internal database encryption) i choose one but i am confuse that shd it be the same as primary ACS one as it has been config ag...

Hi,I got a problem with an access server (5350). The authentication is working but I'm having trouble with the authorization lately. This is an intermittent problem. Any idea or troubleshooting step I should take? Looks like ACS is not receiving auth...

I have 7206 with 12.2 SB as a broadband PPPoE aggregator. 7206 uses tac_plus server to authenticate user PPPoE sessions. The problem is tac_plus does not log stop records. After some research I find out that router can not send accounting records whi...

Hi I have a setup ACS 4.1 CS-Manager 3.2.2I have intergrated the CS-Manager into ACS with no problems. However when I try to add devices into the CS-Manager I get the message "The Device is not in the Cisco Secure ACS"I have one wildcard entry encomp...

Hi, I am using AS5350 and I am using it for calling card application using Clear Box as my RADIUS Server for AAA. My question now, how would I know if cisco is sending the dtmf for "enter card number.au" on the RADIUS server ? Does the card number in...

The box was operational for last few months. Suddenly it is not booting and giving "descret error".Thanx in advance