Network Access Control

Dear All, i have been practicing local AAA without remote server, i am confused as what is the practical difference between these 2 following commandsaaa authori exec default noneaaa authori exec default if-authenticatedThe end result in both cases s...

Hello,I try to do MAB authentification for a non-cisco phone. My port config is : switchport mode access switchport nonegotiate switchport voice vlan 41 dot1x mac-auth-bypass dot1x pae authenticator dot1x port-control auto dot1x host-mode multi-host ...

Hello,I have EzVPN configured in routers and asa5505 as a client and ASA5510 as a server, but I can not get through aaa authentication (accounting & authorization too) in both cases, and snmp on the asa5505 case.Traffic between LAN behind router and ...

Hi,I'm having some issues on implementing radius accounting. Below are my configurationsaaa group server radius ClearBox server 192.168.111.8 auth-port 1812 acct-port 1813 accounting accept ClearBox!aaa accounting exec default start-stop group ClearB...

...

I want to restrict access to 6500 ports to known MAC addresses. I know I can't use port security, nor can I apply an MAC layer ACL to the port, so I'm going to try 802.1x and/or MAC authentication bypass.There is a potential for hundreds of MAC addre...

Since I upgraded to IE 8, trying to admin the ACS GUI is very frustrating. It acts as though I am on a dialup connection. Could it be IE 8, or the version of Java running? What is the recommended Java version to use with IE8 and 4.2 ACS?

I just need some input from anyone who has configured ACS. I distinctly remember be able to change my ACS password from a router or switch by entering a blank password with my users name. Is this option still available in the current ACS 4.1 or 4.2? ...

I am looking for help on what happens with the below example if the TACACS server fails and you try to console into the device. I am assuming that the next order would be "aaa authentication login line-only line" but I'm not understanding what the "l...

Hello,I have 2 ACS SE boxes set up. One is the master, the other gets a copy of the DB via replication and is located in a different geographical area. I want failover for authentication and have installed the Windows agent on a server in the same ne...

I am trying to install a certificate for wireless PEAP. Everything work without errors but the peap do not work. When i look in the debug files, i see:"EAP: CTL initialization failed"Anybody came across this problem ?Our certificate authority is a Mi...

Hi there!!!I have a doubt about the installation of the appliance Performance Monitor 3.2.2. I have installed this tool in the same server as the Cisco Security Manager 3.2.1, with this license CS Mgr Enterprise Pro - Incremental 500, at the same tim...