Network Access Control

I need to force the Cisco VPN client to change his password on first login. In my setup I have the vpn client username locally created in a Cisco ACS 4.1 Database and we are stablishing the VPN Remote Access tunnel to a ASA5510 version 8.2.So in ACS ...

Hi all,We have a Windows domain aroung 800 users. We got a wireless 802.1x infrastructure  and a VPN box which has been using Cisco ACS as the Radius authenticator.We are experiencing massive Windows AD user lockouts from time to time. In one of thos...

All,Can ACS send an event/snmp trap when it discovers unknown users?How will ACS administrators get notified when ACS discovers unknown users?Stephanie

Is there a way to creat a read only user logon for routers and switches without using a AAA server.

Hi All,I have one nac manager and one nac server.Users on the lan should be authenticated and postured before access is granted.I also want vpn users from the internet to be authenticated.I am having one nac server.How could i do this ?One nac manage...

Hi !I find option for configure beavior of the ACS when expired password was'nt changed for a specific user, but were are defined the other lifetime password option maximum and minimum password lifetime ?  I had find for administrator user of the ACS...

Hi,can someone help me to double check this:If use this procedure: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacsapp/install/admap.htm#1038722 to reset the console password of my ACS appliance will I lose any configurations?I o...

Hi !I curently working of deploying ACS 5.1.0.44 to authenticate administrative session on our telecom devices.  In version 4.2 I had the possibility to have in the log from wich IP address the administrative session is attempt.  I had also able to p...

Hi !I would like to know what is the purpose of enable password option in the user indentity form on ACS server version 5.1.  The only possibility was to have a personnalized enable password per user, I had defined a specific password for one user an...

Hi,Please i need help!!!I got 10 switches C2560 and one core switch 3750G, i want to implement dot1x port authentication.I want the authentication validated with EAP/Radius ( Windows2003).Question:Do i have to to implement dot1x on all C2560 switches...

Hello,I have a PIX 515E running Cisco PIX Firewall Version 6.3(5)123. I am looking to have Management users connect to the PIX with their Active Directory credentials to manage the PIX. I have been successful in configuring this for all my switches, ...

Hi All,Does ACS have any way of saying "If a user is authenticating to deviceA, use externalDB1 for the password, but if they are authenticating to deviceB, then use externalDB2"?An example of how this is practical is that our security policy dictate...

I have attatched the config for my lab router in its entirety.  The lab is air-gapped so I'm not scrubbing anything from its config.  I configured some example server groups, and the servers are dummy servers to force a failed connection so that my u...