Network Access Control

I was securing my switches to allow users to login using radius and notice that I have to set the IAS server to PAP for the Cisco equipment to authenticate. Is there an alternative to this since PAP is clear text.[ PC ]__SSH__[Switch]___PAP___[ IAS ]

Hello.In Failed Attempts report, under "Author-Failure-Code" I get "Command denied". Is there any way to record the commands that the user wanted to enter?Thanks!.

I'm trying to setup a LOCAL CA SERVERfor an ASA 5520.i'm stoppped to the authentification page/+CISCOA+/enroll.html from IE7the server return authentication failedeven if i use the correct user One-time Password received by mailDoes anyone could help...

Hi,I've got ACS 4.2 windows installed in domain member server n run well. I can authenticate using users in AD. I use this ACS for authenticating user for routers & switches access, VPN access and wireless access.The question is how could i restrict ...

Hi all.I want to know if there's a way for the User-level NAR to overwrite the Group-level NAR in ACS 4.2.Presently both of them seems to be added to each other.Thank you very much for your help.

Hi, Can any one provide me with a link on the Cisco website where I can download the 90-day evaluation copy of Cisco Secure ACS? I can't seem to locate it on the download page.Thanks.

HiI'm currently looking to migrate a customer from ACS 3.3 on a Win2K server to an Appliance.The current ACS server provides AAA for approx 1000 routers/switches etc to provide authentication for interactive logon (via Novell LDAP) and scripted maint...

Folks, greetings.We have a customer that needs to install a patch on his ACS-SE, but since this is a very big and productive environment, he is very concerned in doing so without testing on a lab in advance.As we don't have an appliance to run the te...

I set a Catalyst 2950 switch to the console port authentication is THROUGH the ACS, in case of failure to use the local user base, works well. the problem is with a 2950-XL switch, which does not support the command aaa authorization console, I can d...

I am trying to implement Radius (using ACS v3.2) on Secure Computing's Sidewinder G2. It appears I need a VSA (vendor specific attribute) to make it work properly. I have tried it with Radius (IETF) but no luck. Any suggestions on how I might go ab...

I have to define the following IPSO-specific service in your TACACS+ server:service = nokia-ipso {Nokia-IPSO-User-Role = "role_name_on_IPSO"Nokia-IPSO-SuperUser-Access = <0|1>}How can I do it?

I am have problems setting up the Cisco ACS server with PEAP-MACHAPv2. Does any one have a step by step guide to help with this issue..

I am running the ACS and all this good, I delete a AAA client of the ACS, try logging in again and let myself go! .. I had to restart the service CSTacacs to not allow access to the AAA client is well removed ..this is correct? or is there some way t...