Network Access Control

I'm attempting to use an ACS 4.2 appliance to authenticate / authorize users on Brocade SAN switches. I have added the AVP and VSA to ACS, and they all show up in the web interface to select. When I configure a specific attribute for authorization le...

I defined two NAPs, one is Windows_PC, and one is IP_phone. How does ACS decide which NAP to apply when a PC or IP phone tries to connect?Windows_PC NAP defined with PEAP EAP-MSCHAPv2 and AD database. While IP_phone defined EAP-MD5 and ACS internal d...

Can I define a range of IPs in an access list?I know it was not possible in the old versions, I could only define something that could fit in a network/mask pair.Like, 192.168.40.0 255.255.255.0But what if I want to define from 192.168.40.23 to 192.1...

I am trying to set up accounting from several FWSM contexts to a couple of (new) ACS servers. It generally works, but there are a few issues. This is the aaa configuration in the context I'm testing with:aaa-server tacacs-auth protocol tacacs+ reacti...

hi,currently i want to authenticate 2960 switch to ACS4.1..(i already tested the configuration in VMWare and is successful)..but on runing environment when i enter the username and password on switch the ACS shows that the authentication is succesful...

Hi,My requirement is to map an Active Directory group with ACS group and allow only this group to ssh/telnet to Firewall and Router.So far I am only able to map group on ACS. wht steps are required on ACS and Firewall or Router, in case ACS is down t...

Is it possible in ACS 5 to limit the amount of devices a person can log into simultaneously? We would not want this to be global as there are other user ID's that need unlimited. Thanks in advance

I am looking at an ACE 5.0 deployment. The doco mentions that TACACS custom attributes are not supported. Is there an alternative method to authenticate MDS and ACE devices with TACACS, which both use TACACS custom attributes.Additionally, WLC's and ...

Hi, i have aironet AP`s in the infrastructure, Cisco ACS 1113 (ACS v4.2) and clients are authenticated by radius against windows database. All was working good. But after power crash was ACS engine down for 4 days and windows servers was down one day...

Is it possible to configure ACS 4.x to return reason that caused the user to be rejected (e.g. account disabled, wrong user/password...) to NAS?

hi,If we have following aaa authentication command on routeraaa new-modelaaa authentication enable default group tacacs+what will be the result?What does key word default indicates? ( If it's list name we can apply this list to vty lines. Here only o...

Hi,I have ACS 4.0 running on Windows 2003.ACS is mainly used to authenticate VPN users. Authentication on ACS is via local database and Windows Active Directory. I need to understand how to restrict access to a host for VPN users on ACS ServerHow to ...

Dear All, i have been practicing local AAA without remote server, i am confused as what is the practical difference between these 2 following commandsaaa authori exec default noneaaa authori exec default if-authenticatedThe end result in both cases s...