Network Access Control

I'm testing LDAP authentication on our ASA and it is working well. A problem I am experiencing though is that we have some users who log in as 'DOMAIN\user' and '[email protected]'. LDAP authentication doesn't appear to support this. I'm able to log in...

aaa new-modelradius-server host 172.2.3.25 key ciscoaaa authentication dot1x default group radiusaaa authorization network default group radiusis there an issue with the network statement in that config?

Hi,How do I configure ACS to authenticate and authorize modem users with radius. My problem is with authorization(authentication is ok in the debug). Do I need to configure specific Av pairs (006 and 007 in IETF)

I currently have an ACS server running 3.3.4. It is an old server so I purchased the upgrade to 4.2 and have installed it on a new server. Can I due a database backup on my 3.3.4 server and restore it int the 4.2 server. If not what steps do I have t...

Morning all.I have recently set up LDAP as my Unknown User Policy database. It works well thanks to the 4.2 Build 24 Patch 12 update (we were running no patches before). However, when I did a packet sniff, I noticed that my password was being sent in...

Can I preserve ACS-SE logs for let say 90 days? Is there way to Purged Logs automatically or manually?

Hi all,Suppose this is configured on a router:'aaa authentication login default group radius local'.A user telnets to this router and radius does not respond.Will the router prompt for a new user/pass to check against the local database or it will us...

Hi !I have to setup our ACS to authentication all administrative session on our telecom device. Based on our security policies all use need to be authenticate by a secured password and also a second component like a security token or something else.....

Hi every one.i have got my company's ACS administration Rule now which is configured by other one.now im trying to find out what he has done.so far there is no big deal except Network access profile.he has created netwok access profiles to restrict u...

After the implementation of ACS, all the network switch authentication is under ACS with local as backup. Is that any solution to separate the authentication methods (Local & TACACS+) of SSH access to the switch (line vty 0 3 = TACACS+, line vty 4 = ...

Hi,Is it at all possible to dynamically add users into policy groups via LDAP yet authenticate them against another radius server or alike rather than against the domain. We want to be able to assign the users permissions dynamically, yet still use t...