Network Access Control

I'm not sure if what I want to do is possible so hopefully someone can set me straight.Right now when a user doesn't have a 802.1x capable machine, they are assigned to the guest VLAN. Then using the dot1x fallback command we could force them to use ...

Dear All,We try to configure port based authentication on cisco switches 4507,2900 series with Microsoft ISA as Radius servers in our wired network.What are the configs do we need to apply in all the devices including XP workstation. We would like to...

Hi All, my cisco router uses a PKI certificate. the certificate used has an expiration date. the router is set to renew automatically (auto-enrollment) the certificate on a specified date (before the expiration date). problem: when the router can not...

Is there any way to pull a report of the existing settings of the different groups configured in the ACS device?

Hello.I am moving from cisco 2610 (Version 12.2(7r)) to 3845 (Version 12.4(24)Т). And it doesn't have a commandvirtual-profile aaaI see that I am not a first person with such a problem, but I really need to fix it or at least an explanation why it d...

Does anybody knows if it is possible to move the user DB from an ACS3.1 to a new ACS4.1? Thanks in advanced.Oscar Perez

We had an issue where the logs on the primary ACS server states that 03/17/2009 18:36:07 jones WARNING Cannot replicate to 'barnaby' - server not responding where jones is the primary and barnaby is the secondary. We have recycled power to both, sto...

In our aaa implementation we use tacacs with the local db as backup. Well, I'm trying to harden security. I know IOS has this nice little command:“login on-failure log every x”This would be great so we could at least see the syslog message and ha...

Hello,I have two ASA5510 configured as vpn concentrator for network extension with some pix501, they are located in different buildings. I have connections and the tunnel gets up in any side with no problem, but in one of them I have no traffic. I ha...

I have Secure ACS 4.2 installed. I am using it for vpn access with Radius and tacacs+ access for network device mgmt. I want to setup multiple NDGs but have them all use the same ACS tacacs+ server. How do I do that? Each time I add a new NDG and...

I had started this conversation in the "General" area (I think incorrectly) so I'm going to post it in here as well (just in case - appologies to the moderators).In our aaa implementation we use tacacs with the local db as backup. Well, I'm trying to...

Hi I am presently using acs v4 is there any way that I could configure a device to authenticate using tacacs and radius to gether in acs ,

folksi'm having problems with one of my acs appliances - i suspects its giving out duplicate IP addresses to users and therefore causing vpns to faili only have 8 accounts but each one represents a department in my organisation and the departmental a...

Hello, I want to know if the following scenario is possible:VPN Client installed in a laptop that needs a digital certificate to login into a device. The idea is that besides username and password the laptop needs a certificate to access the network ...