Network Access Control

I'm trying to configure a Cisco Pix 506E. I've added a static translation rule for IP. Then I've added an access rule to the inside network over one port I need to use. Everything is working Ok and I do connect through the Pix over such port. But, wh...

Hello,I get this Expression from my RADIUS server that I would like to match in the ASA Dynamic Access Policy. DAP_TRACE: Username: hal, aaa.radius["25"]["1"] = DevelopersI tried may combinations with no success. Like EVAL(aaa.radius.25, "EQ", "Devel...

Hi All I have a ACS SE, recently upgraded to 4.2. What I am seeing is a Cert error when trying to login to the admin interface using FireFox. I am can get throught after accepting a few waringins using IE but Firefox stops dead at the error <Err...

Hi, I am interested in learning how to Integrate CW2K serves with ACS? Currently we have ACS 4.0(1) planning to upgrade it to 5.0. What is recommended? Shall I upgrade first and do the integration part or the other way?

This is an easy one, but if you're stuck you're stuck!I am unable to connect to my ASA5520, I get the following message:[SSH] FAIL: No connection could be made because the target machine actively refused it. I have a backdoor to access it and not s...

IOS version c3640-a3jk9s-mz.123-18.binaaa group server tacacs+ cciesec server 192.168.3.10!aaa group server tacacs+ ccievoice server 192.168.3.11aaa authentication login VTY group cciesec localaaa accounting exec cciesec start-stop broadcast group cc...

Hello everyone,I am trying to get ACS to do MAC based authentication where upon client connection the switch forward the MAC address of the client to ACS to either authorize or unauthorize the port. I need to do this in an agentless fashion as most ...

Hi All, i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,like the followingWed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop task_id=3 service=shell priv-...

Can the ASA be configured to leverage XAuth against both SDI (RSA token) and Windows AD? It seems we can configure only one or the other but not both. For example, if we configure authentication using SDI, the VPN client only prompts for a username a...

I have a group in ACS that has limited level 15 access to NDGs. Under Unmatch Commands I have "configure", with "permit terminal" under unmatched arugs. This has been working fine for months.A week ago,this command stopped working. I've tried removin...

Hi: our group today adds new network device groups, devices, users manually to tacacs using Web GUI. I am trying to automate this process. I have the capability to connect to database and insert/update/delete records from our trouble ticketing system...

guys we have a radius server for authentocation......most of our swuctehs have following configaaa new modelaaa authentocation dot1x default group radiusaaa authentication login default noneguys my manager said that i shd use aaa authentocation login...

Hello, i need to convert ACS 3.2 from internal database (authentication) to active directory.i searched for the configuration guide but i can't find it.

Hi, I have just configured Cisco ACS for windows .In that i created two users, GUEST & ADMIN. ADMIN has all the rights but guest can only run "show" commands. Now my Bose is asking me to create different users & provide different priviledges to th...