Network Access Control

Hello ,i have a remote vpn users connecting to our network and one vpn group can access specific servers ( controlled by access-list )and there are authenticated by ACS.the problem is that in the same vpn group ,some users should be able to access so...

Hi All,I am having a problem with implementing TACACS+ on the FWSM 3.1(11). The issue is, I can add the command "aaa accounting command privilage 15 group-name" but after adding i cannot see the username from the ACS server. The username displayed is...

When user login and authenticate through ACS they are dropped into the Group:Default instead of the group that I created for them.I have added wireless to our environment, I want to take advantage of using Radius and 802.1x to authenticate the wirele...

Hi,We have simple ACS deployment where we have a number of users throughout the world that require access to network devices.At present, I can manage access using custom attributes for specific clients, WCS, WLC's for example.What I want to do is lim...

I was looking at the requirements for ACS 5.0 VMware image and it states that the ESX server needs 600GB of drive space and that the ACS VM requires 500GB of virtual drive space.Why is this much drive space really needed? The 5.0 appliance only has ...

To allow an AAA user access to the "show config" command I have created them an account in ACS and assigned the relevant "Shell Auth Set" but it still does not permit them to use it?, I read that this may not be the command that the switch sends the ...

Hello,if it is possible we want to access all our applications (LMS, WCS, WLSE,...) over the TACACS+ integration and ACS.So we have a lot of "new services" under Interface Configuration -> TACACS+ (Cisco) -> New ServicesIs it possible to add more tha...

ACS is being used for AAA Authorization, and I have allowed a user to run "show command" but the ACS server always fails the request "saying command unknown"

I was use ACS 4.2 and to used external user database by the LDAP.The ACS could load English domain or name. But it couldn't Chinese dommin name.How do I to do ?

We are using Cisco ACS 4.1 for Windows RADIUS server, Windows 2003 PKI, 3750 access switch and Windows XP SP 3 workstations.Problem is that users with user certificate can loging successful by 802.1x. When user logs in without user certificate (but w...

I am trying to use Radius for Port-Security on a Catalyst 3560; the Radius-Server is a Windows Server/2008.I am not able to get authenticating.This is the Configuration of the Switch:SW-SEDE#sh runBuilding configuration...Current configuration : 2845...

I have about 10 VPN clients connecting to a Cisco ASA 5510. I am getting calls that sometimes people are getting 413 errors here and there. When they out it username and password, the dialog box pops up again and then they get a error 413 cannot auth...