Network Access Control

TACACS+ is configured for AAA (Authentication and Authorization) with LOCAL as a backup. But how can I ensure that the local user will be authorized to perform tasks in the event that TACACS+ is unavailable. The authentication fails over fine, but Im...

We are trying to authenticate against a AD group, instead of authenticating with AD it gives the following message and places the users in the default group, any ideas ?RDS 08/10/2009 23:54:03 P 0786 3192 0x0 Found local user MSNET\ibis5471RDS 08/10/...

Tacacs not working on router. Here's the debug:Feb 15 09:01:35: TPLUS: Queuing AAA Authentication request 56 for processingFeb 15 09:01:35: TPLUS: processing authentication start request id 56Feb 15 09:01:35: TPLUS: Authentication start packet create...

Hi!We have a setup with ASA and ACS 5.0 and are trying to send Radius attribute Class (25) back from the ACS to the ASA to assign Group-policy.The problem we have is that the ACS responds with somekind of session-id in as value for the class-attribut...

I have 2 ACS boxes (Cisco Secure ACS 4.0 X solution engine 1113 appliance).Is there any way i can replicate the configuration of both the boxes.is there any way or we manually need to do config replication (Both ACS reachable to each other as well as...

I am trying to find solution for some type of settings in ACS.Imagine for instance real situation as follows:There is group "A" with 100 users. I need for 20 of them assign the access to devices in the group "B". I can't find any easy possibility how...

Hi all I integrated ACS with CSM and added all the security devices into ACS as client devices.But after integration with with ACS only few devices are shown in the CSM when i logged in as super admin.for all other users (system admin,network operato...

We currently have login on-failure configured, but have found the user information is blank for Telnet sessions. Whereas SSH failed logins DO show the user information. We are running IOS 12.4(22)T. Is this expected or possibly a configuration settin...

Hi, I am implementing 802.1x in my network where I have some avaya switches & some cisco switches. My First question is that how can I implement it on avaya switches.Second how can I configure a cisco switch port on which another cisco switch is conn...

Hi,I have a 1841 router and I'm trying to see the user name when he fails to login to the router; I have the following configuration and when I do a show log; I see the failed attempts but do not see the user who failed:login block-for 60 attempts 3 ...

HI All, any body has tried configuraing pvlans with 802.1x..both can work together or not ? what about protected mode, can it work with dot1x. my requirement is to block communication between guest laptops if they are from different company but if th...