Network Access Control

I am doing the NAP With 802.1x enforcement. I Set the Guest vlan and auth-fail vlan and set the 802.1x authcation based port in the cisco 3550 switch and configure the RADIUS standard attributes Tunnel-Medium-Type, Tunnel-Pvt-Group-ID, and Tunnel-T...

Hi I have added a router in ACS. Now I configure the former to get authenticate authorize through tacas . Due to some hardware problem I replaced my ACS but when I reconfigured the new ACS with the backup file I am able to login with the local users...

I'm authenticating L2TPoIPSec VPN users using RADIUS without problems.Rather than using the tunnel-group "address-pool" general-attribute to specify the pool, I would rather have the local pool name pushed by RADIUS.So far, I haven't had any luck. T...

I'm attempting to use an ACS 4.2 appliance to authenticate / authorize users on Brocade SAN switches. I have added the AVP and VSA to ACS, and they all show up in the web interface to select. When I configure a specific attribute for authorization ...

I defined two NAPs, one is Windows_PC, and one is IP_phone. How does ACS decide which NAP to apply when a PC or IP phone tries to connect?Windows_PC NAP defined with PEAP EAP-MSCHAPv2 and AD database. While IP_phone defined EAP-MD5 and ACS internal d...

Can I define a range of IPs in an access list?I know it was not possible in the old versions, I could only define something that could fit in a network/mask pair.Like, 192.168.40.0 255.255.255.0But what if I want to define from 192.168.40.23 to 192.1...

I am trying to set up accounting from several FWSM contexts to a couple of (new) ACS servers. It generally works, but there are a few issues. This is the aaa configuration in the context I'm testing with:aaa-server tacacs-auth protocol tacacs+ reac...

hi,currently i want to authenticate 2960 switch to ACS4.1..(i already tested the configuration in VMWare and is successful)..but on runing environment when i enter the username and password on switch the ACS shows that the authentication is succesful...

Hi,My requirement is to map an Active Directory group with ACS group and allow only this group to ssh/telnet to Firewall and Router.So far I am only able to map group on ACS. wht steps are required on ACS and Firewall or Router, in case ACS is down ...

Is it possible in ACS 5 to limit the amount of devices a person can log into simultaneously? We would not want this to be global as there are other user ID's that need unlimited. Thanks in advance

I am looking at an ACE 5.0 deployment. The doco mentions that TACACS custom attributes are not supported. Is there an alternative method to authenticate MDS and ACE devices with TACACS, which both use TACACS custom attributes.Additionally, WLC's and ...