Network Access Control

Good afternoon all,We have yet to power on our ACS appliances so we are somewhat concerned of our upcoming upgrade. Does the USB ports on teh Appliance work as other USB ports do? I guess my question would be, if I backup my current acs box and put...

Hi,I have a group of wireless AP running WDS, all authentications (infrastructure and clients) are done with a Cisco ACS 3.3 which is separated by a Checkpoint firewall. Everything was working fine until recently I relocated all the APs to a differen...

I'm prototyping a NAC setup which has to cater for Macintosh clients as well as Windows. I can get the Macs to authenticate via 802.1x (surprisingly easy using the built in software!) but what I can't do is setup a Posture Validation Rule to identify...

I have a router running IOS which users connect to using the Cisco VPN Client. The router uses dynamic crypto maps (not bound to a Tunnel interface). Is there a way to show which users are logged in over the VPN?

We are attempting to create a security group within our AD structure (cn=CiscoSSLVPNUsers,cn=Users,dc=wallacestate,dc=edu) and query that from our ASA5520 running IOS 8.0(2)Is this possible?Thanks!Bruce Tenison

I have configured some of our network devices to authenticate to our TACACS server. Some of the network engineers have asked me to see if I can come up with a way that they don't have to type in their password twice on the network devices. I saw a di...

HiI created "Shell Command Authorization Sets" under ACS 4.1.I use Radius (IETF). How do I map the "Shell Command Authorization Sets" to user groups???Thanx for helpbb

Hi,I was adding multiple AAA Clients on ACS Appliance using RDBMS Synchronization option I followed the complete steps but failed to synchronize accountActions.csv file on ACS my ftp server is working fine and returned the logs saying "accountActions...

We faced the following problem when we configured both vendor-tag circuit-id service and radius-server attribute nas-port format d command in our 7200VXR.When finishing configuration we did a debug radius and received the "AAA Unsupported Attr: circ...

Hi,We use mac-address-table static h.h.h vlan <1-4096> drop to block mac address in certain VLAN in IOS Version 12.2(18)SXF7.. That's working great. New employee comes, we want new guy to be able to show the mac-address-table static and no mac-addres...

We have a VPN concentrator, how can I stop users using local accounts and use their Windows Active Directory user accounts?

have CIsco ASA 5510 that I used for VPN access. I have it setup to Authenticate against AD for username and password. That all works fine, the problem is if a user enters an incorrcet password in VPN logon, it appears the ASA will try repeatly to au...