Network Access Control

Versions involved:AAAACS 4.1.4.13.12Devices:C2960-LANBASE-M, Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)C3550-I9Q3L2-M, Version 12.1(14)EA1a, RELEASE SOFTWARE (fc1)If we try to configure a single interface or just a very small range, it works fine, ...

Hi Is there any best practices for configuring Command authorization (for router/switch/asa) in CS-ACS? To be specific, is there any best practices to configure authorization for a set of commands allowed for L1,L2,L3 support levels? RegardsV Vinodh.

Hi,I have a issue here on two of my new switches when i telnet i get username and password once logged in then i go to enable mode i again get a username and password prompt this time the password i have to give is enable password.This is not a issue...

HelloI am currently preparing an installation for wired 802.1x authentication. My setup consist of the following:- MS IAS- MS AD- MS DC-DHCP for auth. users- Switch WS-C3560- Testclient with CSSC 5.1The dot1x authentication itself is working properly...

Is it possible to automate the removal of dynamic users to a preset schedule, say once a month?thanksBob

we need to deploy the following1. both internet IPsec VPN and SSL VPN will run from a Cisco ASA55102. Users use the same credential as their office Windows AD Domain, aka single-login3. RSA server has been installed to provide two-factor authenticati...

Greetings-Is it possible to force AAA uauth queries via attached users behind a router doing L2L with an ASA - where the ACS server is behind the ASA? This would be used to control Internet access for hosts behind the router - using split-tunnel and...

Scenario: Cat3560 using 802.1x Multidomain Authentication (MDA) on the access ports. Which means Nortel Phones authenticating into the voice domain and cascaded PCs authenticating into the data domain on the same access port. MAC Authentication Bypas...

Dear All,kindly let me know:How to Configure Switch to locally authenticate end points (PCs)using dot1X.Just like AAA local authentication I want that the switch should locally authenticate end stations using IEEE802.1XThanks,Ashish

Hi,I'm working with CAR, i need to use a script, if the RADIUS_WORKER_THREAD_COUNT variable is 255, i need to configure some extra in the script to work with threads?The script is very easy, is made to change a variable.# more accdb.tcl proc accdb ...

Is it possible turn off the blue light in front from acs hardware?

I have a user in a windows group, this windows group is mapped to an ACS group but when the user logs in it appears as default group in ACS.Any suggestion?