Network Access Control

Hi,My requirement is to map an Active Directory group with ACS group and allow only this group to ssh/telnet to Firewall and Router.So far I am only able to map group on ACS. wht steps are required on ACS and Firewall or Router, in case ACS is down ...

Is it possible in ACS 5 to limit the amount of devices a person can log into simultaneously? We would not want this to be global as there are other user ID's that need unlimited. Thanks in advance

I am looking at an ACE 5.0 deployment. The doco mentions that TACACS custom attributes are not supported. Is there an alternative method to authenticate MDS and ACE devices with TACACS, which both use TACACS custom attributes.Additionally, WLC's and ...

Hi, i have aironet AP`s in the infrastructure, Cisco ACS 1113 (ACS v4.2) and clients are authenticated by radius against windows database. All was working good. But after power crash was ACS engine down for 4 days and windows servers was down one day...

Is it possible to configure ACS 4.x to return reason that caused the user to be rejected (e.g. account disabled, wrong user/password...) to NAS?

hi,If we have following aaa authentication command on routeraaa new-modelaaa authentication enable default group tacacs+what will be the result?What does key word default indicates? ( If it's list name we can apply this list to vty lines. Here only o...

Hi,I have ACS 4.0 running on Windows 2003.ACS is mainly used to authenticate VPN users. Authentication on ACS is via local database and Windows Active Directory. I need to understand how to restrict access to a host for VPN users on ACS ServerHow to ...

Dear All, i have been practicing local AAA without remote server, i am confused as what is the practical difference between these 2 following commandsaaa authori exec default noneaaa authori exec default if-authenticatedThe end result in both cases s...

Hello,I try to do MAB authentification for a non-cisco phone. My port config is : switchport mode access switchport nonegotiate switchport voice vlan 41 dot1x mac-auth-bypass dot1x pae authenticator dot1x port-control auto dot1x host-mode multi-host ...

Hello,I have EzVPN configured in routers and asa5505 as a client and ASA5510 as a server, but I can not get through aaa authentication (accounting & authorization too) in both cases, and snmp on the asa5505 case.Traffic between LAN behind router and ...

Hi,I'm having some issues on implementing radius accounting. Below are my configurationsaaa group server radius ClearBox server 192.168.111.8 auth-port 1812 acct-port 1813 accounting accept ClearBox!aaa accounting exec default start-stop group ClearB...

...