Network Access Control

I installed ACS 4.2,ANYTIME I try to login to the router it ask me the enable password and give autho failed in the acs log,can somebody help pls. sample of the configuration I put in the Router:

Hi All, Any idea? After clean up all routers and switches config files, sw3 still asks for radius username and password. When console login and using 3550 password recovery procedure, it still asks for username and password. When config aaa new-model...

Failed to authenticate on test account

aaa new-model!!aaa group server radius cisco-acs server-private 10.32.108.68 auth-port 1645 acct-port 1646 key u14c server-private 10.32.0.9 auth-port 1812 acct-port 1813 key u14 ip radius source-interface BVI1!aaa authentication login default group ...

Is it possible to have the ACS user database in an excel sheet

I'm testing LDAP authentication on our ASA and it is working well. A problem I am experiencing though is that we have some users who log in as 'DOMAIN\user' and '[email protected]'. LDAP authentication doesn't appear to support this. I'm able to log in...

aaa new-modelradius-server host 172.2.3.25 key ciscoaaa authentication dot1x default group radiusaaa authorization network default group radiusis there an issue with the network statement in that config?

Hi,How do I configure ACS to authenticate and authorize modem users with radius. My problem is with authorization(authentication is ok in the debug). Do I need to configure specific Av pairs (006 and 007 in IETF)

I currently have an ACS server running 3.3.4. It is an old server so I purchased the upgrade to 4.2 and have installed it on a new server. Can I due a database backup on my 3.3.4 server and restore it int the 4.2 server. If not what steps do I have t...

Morning all.I have recently set up LDAP as my Unknown User Policy database. It works well thanks to the 4.2 Build 24 Patch 12 update (we were running no patches before). However, when I did a packet sniff, I noticed that my password was being sent in...

Can I preserve ACS-SE logs for let say 90 days? Is there way to Purged Logs automatically or manually?

Hi all,Suppose this is configured on a router:'aaa authentication login default group radius local'.A user telnets to this router and radius does not respond.Will the router prompt for a new user/pass to check against the local database or it will us...