Network Access Control

HOw can I achive command accounting via acs I have configured devices as below but no luckaaa accounting exec aaa-list start-stop group bwaaaaaa accounting commands 1 aaa-list start-stop group bwaaaaaa accounting commands 15 aaa-list start-stop group...

Hello,Is it possible to have two different AD for two different Windows Domains for the same IPSec connection profile? I have tested having both ADs in one AAA server group, but if the user is not found in the first server, it stops searching. Is the...

Hi there, I am stuck in these error everytime I install CAR4.2 in Solaris 10.Here's the error log: extracting: /opt/CSCOar/jakarta-tomcat-4.0.6/webapps/tomcat-docs/images/tomcat.gif inflating: /opt/CSCOar/jakarta-tomcat-4.0.6/webapps/tomcat-docs/inde...

I have users that access the network via a VPN client to a PIX 515 which authenticates to the ACS (using the default group for unknown users) which uses an external Active Directory Database. The problem I have is that as the ACS authenticates these ...

guys is there any cisco book which includes the config and designs for setting up ACS....Si there any course for cisco which includes ACS topics....i am routing guys so i have no idea abt ACS.....Thanks secondly i tried to download ACS 4.2 from cisco...

Hi,Can someone guide me the link about the configuration of radius authentication on ACS(4.1)and how to assign the rights(admi & user) for all the cisco swithes.Thanks in advnce.regards,Sum.

Hi Guys,With WLCs and ACSs there is the concept of session timeouts, where a use has to re-auth when useing eap-tls.What is the default EAP-TLS resumption timeout and is this server or client specific?Pls see:http://www.faqs.org/rfcs/rfc5216.htmlsect...

Hello,I have ACS 4.2 appliance .My ACS frequently hang up in a day or two. Please help me what are the possible causes of this and solutions.Thanks Ritesh

Attemptiong to associate usernames with specific views once they login. Views have been successfully created and associated with username, but when the user logs in - they have to enter "ena view xxxx" before the view applies to them. My understandin...

I have an ACS 4.0 device. I have started to logging more data to the TACACS Admin file and now want to change the defaults. The default being rotate log every month and keep the last 7 files. I would like rotate log files daily and keep the previous ...

Our tacacs sits on the other side of a pix firewall. As a result we are causing alot of xlate transactions on the pix as we enter commands on our devices. What are the suggested timeout values?Our conn count is max 2700timeout xlate 3:00:00 (default)...

i have a windows 2003 active directory domain setup with cisco acs 4.2 also installed on it I'm using a 2611xm router(ios 12.4 advsec) if I create users on the acs, i have no issues setting up AAA Authentication however, I have followed the online do...

Hi to all,Does anyone know if it is possible to restore an ACS v3.2 backup on a new ACS v4.2 or v5.0?? I have a customer that wants to perform an upgrade but i'm not sure if we will have to configure all over again in the new version.Thanks in advanc...

I'd like to give some of my users the ability to see the running config (show run) but at the same time restrict them from doing any config changes. I'd thought I might set their privilege level at something more than 1, but less than 15, but I can't...

I'm having trouble with AAA authentication on my ASA, it works fine on all of my Cisco devices, but with the ASA, it will allow anyone to connect.Our ACS verifies authentication with an AD group, right now anyone in AD can authenticate to my ASA.Than...