Network Access Control

We had an issue where the logs on the primary ACS server states that 03/17/2009 18:36:07 jones WARNING Cannot replicate to 'barnaby' - server not responding where jones is the primary and barnaby is the secondary. We have recycled power to both, sto...

In our aaa implementation we use tacacs with the local db as backup. Well, I'm trying to harden security. I know IOS has this nice little command:“login on-failure log every x”This would be great so we could at least see the syslog message and ha...

Hello,I have two ASA5510 configured as vpn concentrator for network extension with some pix501, they are located in different buildings. I have connections and the tunnel gets up in any side with no problem, but in one of them I have no traffic. I ha...

I have Secure ACS 4.2 installed. I am using it for vpn access with Radius and tacacs+ access for network device mgmt. I want to setup multiple NDGs but have them all use the same ACS tacacs+ server. How do I do that? Each time I add a new NDG and...

I had started this conversation in the "General" area (I think incorrectly) so I'm going to post it in here as well (just in case - appologies to the moderators).In our aaa implementation we use tacacs with the local db as backup. Well, I'm trying to...

Hi I am presently using acs v4 is there any way that I could configure a device to authenticate using tacacs and radius to gether in acs ,

folksi'm having problems with one of my acs appliances - i suspects its giving out duplicate IP addresses to users and therefore causing vpns to faili only have 8 accounts but each one represents a department in my organisation and the departmental a...

Hello, I want to know if the following scenario is possible:VPN Client installed in a laptop that needs a digital certificate to login into a device. The idea is that besides username and password the laptop needs a certificate to access the network ...

I have an ACS 4.2 Server and an ASA 5540. I have setup AnyConnect SSL VPN on the ASA and want to authenticate users using AAA tacacs+ authentication with the ACS and an external Windows AD database. I have done this successfully. I also want to us...

Hi,I'm currently running a Cisco ACS v3.2 on a windows server 2003 Pro with a safeword token server. I'm using PEAP (EAP-GTC). The problem is my client(Windows xp Pro SP2) gets disconnected 1 or 2 minutes after he connects to the access point. I have...

I understand that this should be dictated by a security policy/risk assessment, but I was hoping to get some opinions on this.The ACS is behind the Internet firewall. We are going to place it on a LAN so that it can be accessible throughout all the ...

I am running v4.1(23). No command accounting is being logged on the acs server. Found a bugid that supplied a workaround, said cmd and system must be in packet. Tried this and it is not working. Is there any other options I can look at.

I'm looking for a solution for starting with 802.1X for wired and wireless network in a live environment. During the migration I have to turn on port based authentication. But at that moment, the machine must have a valid user / computer certificate....

Is there a way to determine how many active wireless users are on the network by checking ACS? Currently our users need to re-authenticate periodically (about every 15 minutes), however, ACS shows no logged in users. There should at least be one --...