Network Access Control

Hi NetProsMy objective is to assign static IP address for VPN clients. The tunnel group authentication is on a AAA LDAP server.AAA LDAP queries has been configured and tested to work.I followed the guide below, but could not get static IP assignment ...

Authentication failes with message:ACS MSCHAP password is invalid.Group auth works perfect.This problem only occurs when the local ACS User has an \ in the username Domain\user123The auth works perfect with the same password and the Username user123 ...

I see several posts on this subject have been added already, but I thought I would add my 2c.I've been trying to get a remote IPsec VPN(Cisco client) connecting from the inside of our office ASA to a remote ASA. The client would connect fine, but no...

Hi !I try to limit available command in user mode.... it does'nt work...Exemple I had permit show command for user DSC in my ACS shared profile.When user DSC telnet my router the authentication is validate by the same ACS. On the prompt > the DSC us...

Not having much luck getting this to work and searching the forums here everybody seems to say it is not possible unless TACACS+ is used. Is this still the case? I see the AAA/ACCT/CMD in the debug on the local switch but the RADIUS server never re...

Hi all!I have a problem, we are using freeradius server to authenticate the VPN users. It works fine.Now I want authenticate the ssh, asdm users with the same radius.The only problem is that the ASA doesn't send different attributes to the radius and...

How do i check to see user activity once its enabled on my ASA? I need help setting up the AAA on a radius server as well in regards to where i set up the server secret key?Help!

Hi,Not sure if this belongs in AAA or firewalling. I apologize for the mix-up.Does anyone know if there's a user-friendly (i.e. non-LUA) way of matching a single DAP entry to the following constraint:- match specific connection profile- match one of ...

Hi,I want to have my MS IAS RADIUS check on the connection profile that a SSL VPN user selected: Users can only authenticate for profiles that match their group membership. But a single user can be allowed to connect to more than one connection profi...

Hi, I would like separate ACS traffics on 2 two separate NICs, one for front end AAA service related traffics, and another one for web, backup administrative traffic, is it possible?Leo

Hi All,I'm sure this question has already been asked and the solution is simple - however it does not appear to be obvious!My requirement is to have an AD group called 'CiscoAdmins' and another called 'VPNUsers'. Using ACS I want to only authorise me...

Hi I have an early Version Tacacs+ - CSACS3.2-WIN-K9we have upgraded all our cisco devices to ssh 1.5/ ssh 2 however when we renew passwords the tacacs server is not allowing password changes . way around this is to use a telent to a device that curr...

I have ACS 4.1 for Windows and want to upgrade to 4.2. I don't have smartnet on 4.1. When looking at the Cisco Price list I don't see an option for smartnet on 4.1. I also don't see an option for an upgrade from 4.1 to 4.2. What options do I have...