Network Access Control

I have SSL VPN Clients connecting to an ASA 5520 using RADIUS to a backend Cisco ACS. I want to support two authentication options for the clients. The first is a certificate combined with an Active Directory username & password. The second is a t...

Hi,we installed ACS 4.2 evaluation version poc and now we reinstalled with original version, we need to show the ACS is not running as a evaluate version

I am setting up a new ACS SE and will use this ACS to proxy TACACS requests to another ACS SE in another network tier. I know TACACS uses TCP 49 for authentication. What ports/protocol do the ACS SE use to communicate between one another for the prox...

hi allI configured VXR7206 to terminate PPPOE sessions using VPDN GROUP and every thing is ok.but when the user get access to VXR7206 I found the nas port = 0 for each online session ,is it any problem with nas port!!??Note: all online sessions have ...

Here's the config:aaa new-modelip tacacs source-interface Loopback0tacacs-server host 10.1.1.100tacacs-server directed-requestHere's the debug:R7#test aaa group t U1 cisco new-code Trying to authenticate with Servergroup tacacs+*Mar 1 03:17:17.816: ...

Hih All,I have recently aqquired a Cisco ASA device with the intention of setting up a CLientless SSL VPN Portal.My question is, can i control who has access to which portal page via LDAP Group membership?For now, we have a staff portal at device.dom...

Hello ,i have a remote vpn users connecting to our network and one vpn group can access specific servers ( controlled by access-list )and there are authenticated by ACS.the problem is that in the same vpn group ,some users should be able to access so...

Hi All,I am having a problem with implementing TACACS+ on the FWSM 3.1(11). The issue is, I can add the command "aaa accounting command privilage 15 group-name" but after adding i cannot see the username from the ACS server. The username displayed is...

When user login and authenticate through ACS they are dropped into the Group:Default instead of the group that I created for them.I have added wireless to our environment, I want to take advantage of using Radius and 802.1x to authenticate the wirele...

Hi,We have simple ACS deployment where we have a number of users throughout the world that require access to network devices.At present, I can manage access using custom attributes for specific clients, WCS, WLC's for example.What I want to do is lim...

I was looking at the requirements for ACS 5.0 VMware image and it states that the ESX server needs 600GB of drive space and that the ACS VM requires 500GB of virtual drive space.Why is this much drive space really needed? The 5.0 appliance only has ...

To allow an AAA user access to the "show config" command I have created them an account in ACS and assigned the relevant "Shell Auth Set" but it still does not permit them to use it?, I read that this may not be the command that the switch sends the ...

Hello,if it is possible we want to access all our applications (LMS, WCS, WLSE,...) over the TACACS+ integration and ACS.So we have a lot of "new services" under Interface Configuration -> TACACS+ (Cisco) -> New ServicesIs it possible to add more tha...