Network Access Control

So far was able to authenticate Routers and Switches using ACS Local Database & External Database - Active Directory.Accounting not working as expected.Any changes in Switches/Router configuration should be reflecting in accounting which doesnt happe...

HiI can SSH to pix but not HTTP to pix although http is enabled.I am using ACS/RSA for user authentication.I see SSH is allowed in ACS but I do not know How to configure ACS so that I can HTTP to pIX ?I am trying to connect to pIX with Cisco Network ...

I am doing the NAP With 802.1x enforcement. I Set the Guest vlan and auth-fail vlan and set the 802.1x authcation based port in the cisco 3550 switch and configure the RADIUS standard attributes Tunnel-Medium-Type, Tunnel-Pvt-Group-ID, and Tunnel-T...

Hi I have added a router in ACS. Now I configure the former to get authenticate authorize through tacas . Due to some hardware problem I replaced my ACS but when I reconfigured the new ACS with the backup file I am able to login with the local users...

I'm authenticating L2TPoIPSec VPN users using RADIUS without problems.Rather than using the tunnel-group "address-pool" general-attribute to specify the pool, I would rather have the local pool name pushed by RADIUS.So far, I haven't had any luck. T...

I'm attempting to use an ACS 4.2 appliance to authenticate / authorize users on Brocade SAN switches. I have added the AVP and VSA to ACS, and they all show up in the web interface to select. When I configure a specific attribute for authorization ...

I defined two NAPs, one is Windows_PC, and one is IP_phone. How does ACS decide which NAP to apply when a PC or IP phone tries to connect?Windows_PC NAP defined with PEAP EAP-MSCHAPv2 and AD database. While IP_phone defined EAP-MD5 and ACS internal d...

Can I define a range of IPs in an access list?I know it was not possible in the old versions, I could only define something that could fit in a network/mask pair.Like, 192.168.40.0 255.255.255.0But what if I want to define from 192.168.40.23 to 192.1...

I am trying to set up accounting from several FWSM contexts to a couple of (new) ACS servers. It generally works, but there are a few issues. This is the aaa configuration in the context I'm testing with:aaa-server tacacs-auth protocol tacacs+ reac...

hi,currently i want to authenticate 2960 switch to ACS4.1..(i already tested the configuration in VMWare and is successful)..but on runing environment when i enter the username and password on switch the ACS shows that the authentication is succesful...

Hi,My requirement is to map an Active Directory group with ACS group and allow only this group to ssh/telnet to Firewall and Router.So far I am only able to map group on ACS. wht steps are required on ACS and Firewall or Router, in case ACS is down ...