Network Access Control

I'm using ACS 4.2, TACACS+ and SSH for management. I have configured password aging on ACS. Every thing works fine but one thing. When I'm using puty as SSH client I'm not receiving notification that the password will be expired. Notification works f...

We are going to set up a CAR server as a Radius proxy. Looking through the admin guide, it mainly mention how to set up CAR as a RADIUS server instead of a proxy server. We still have no idea on how to configure it. Could you help to advice some guid...

Hello,Description:- I have an ACSv4.1- I have 2xNAS configured on ACS as RADIUS IETF- I have definet IP Poll under System conf -> IP pool Server (start Address & End adress)- On the Group setup I defined IP-assignement -> Assigned from AAA Server poo...

Hello,I have a problem when i setup ACS Apliance 4.2.0 using command line, in the output of the console i have this message.Error: Failed to set password: rc = [997] Overlapped I/O operation is in progress."Modifying SSH server password file. This co...

Hi,I recently installed new copy of ACS4.2 with latest patch on Win2003 server, the problem I am having is any Tacacs+ accounting or admin related events are not logged, I checked logging is enabled for both services. Is this a permission problem o...

I don't want ot enter enable mode->privilege mode 15I want to connect from console to router with entering privelege username and connect to router.How I can do this?Thank you

All, I have backed myself into a corner with a command I entered yesterday in my ASA. The command entered was:aaa authorization command TACACS+ LOCAL And it locked me down so tight that I can't even go into "conf t" or run a "sh run" command any lon...

I am encountering issues with speed when plugged into my ASA 5520....I have a 10MB pipe.....I can plug into my ISP's router and speed is relative Average.....9MB down and 9MB up.....When I plug in my ASA to the ISP router and plug in my laptop to the...

I was curious if there is a way in radius to set a banner that can be used by ever network device through radius. Radius attribute or something. We have a new security officer in and instead of changing it on every system i would like to manage it c...

Hi All, any one has idea how can I configure my network devices for aaa authentication if I am using 802.1x & accouting as well.. how the deives will be added in ACS..radius or tacacs+..any idea

Dual ACS solution (4.2) with one ACS doing the authenticating, the other acting as a standby. Recently when accessing nortel switches, they authenticate to both ACS, as some are going to ACS2 despite their primary RADIUS server being ACS1.The ACS sol...

Hi There, Any body has implemented 802.1x port authentication with ACS & windows AD. which authentication is supported in this kind of setup ms-chap or MD5 or PEAP (on the clients).and what are the challenges if windows user accounts password changed...

When I upgrade from an ACS from version 4.0 to version 4.1 statics users are saved but dynamic are not saved.This problem was detected in cisco? Is there a way to export the database from version 4.0 to be able to import a version 4.1.I have a big pr...

Hi All, can any body tell me what happens when a switch/hub is connected to a 802.1x port which is configured for guest vlan if switch does not receive 802.1x request on that port from switch/hub..all the pcs connected to that port will be part of gu...