Network Access Control

We are using Cisco ACS 4.1 for Windows RADIUS server, Windows 2003 PKI, 3750 access switch and Windows XP SP 3 workstations.Problem is that users with user certificate can loging successful by 802.1x. When user logs in without user certificate (but w...

I am trying to use Radius for Port-Security on a Catalyst 3560; the Radius-Server is a Windows Server/2008.I am not able to get authenticating.This is the Configuration of the Switch:SW-SEDE#sh runBuilding configuration...Current configuration : 2845...

I have about 10 VPN clients connecting to a Cisco ASA 5510. I am getting calls that sometimes people are getting 413 errors here and there. When they out it username and password, the dialog box pops up again and then they get a error 413 cannot auth...

Hi all,Objectives :Authenticate a supplicant on a Extreme 802.1x port with an ACS SE 4.2Supplicant = IP PhoneAuthenticator : Switch Extreme 450 EAuthentication Server : ACS SE 1113 4.2.0.124.91) We have done the tests with a Windows ACS 4.2.0.124 and...

Hi,I am newbee to ACS.Suddenly i am not able to login into my network boxs trgh ACS. auth getting failed. But till yesterday it was fine.I have restarted the services and reboot the server also but no luck.If you need any logs/info i am ready to give...

Hello to all,Can anyone please help me with one of my problem? I have some Cisco IPSEC VPN Concentrator's that need to be removed from the network. We already have another Juniper VPN which is working fine all the way.But a large number of users were...

hi all, i am facing this very strange issue. I have configured this on my routeraaa new-modelusername cisco password cisco123I havent defined any aaa authentication and my line vty config is also empty. Now when i telnet to this router, i am asked fo...

Hello Everybody, I have a CISCO ACS 1113 with release 4.1.1 build 23 patch 5. I can set the IP ADDRESS using the CLI but the problem is: 1) After some time or after a reboot the appliance the IP ADDRESS is lost. In this moment the network adapter is ...

TACACS is being used to provide access to the switches. We have set up an authorization set, but I want to know how to assign a specific command to an priv level. For instance we grant a vendor level 5 access, and want to assign the command "show int...

just recently upgraded to 4.1 code and now I am receiving a constant stream of alert emails"Service CSAuth not running: will attempt to restart"then"Service CSAuth re-started OK"any idea as to why.

I'm currently able to logon to my internal network 192.168.4.0/24 but not able to get my incoming ACS downloadable ACL working. Combination:PIX605E 6.3(5) - ACS 4.1(1) Build 23 Patch 5.This is my list: permit ip host 192.168.4.200 any (where any can ...

How do you log commands entered by a user connected via telnet. AAA server is ACS, and AAA client is a Cisco Switch

Hello.I have configured replication between two ACSv4.2.Everything worked fine except the AAA clients belonging to NDGs.I am allowing tcp/2000 in FWSM an I am not using NAT.The rest of the configs seem to be OK since I was able to replicate all the r...

Hi everybody -we are implementing AAA authentication via LDAP directly between the ASA an our Microsoft DCs - works wonderfull. What I dont seem to get to work is the LDAP-communication if I try to reach the AAA Server through a Site-2-Site VPN tunne...