Network Access Control

I am using an Asa 5520 for remote access VPN. We currently use local groups for authenticating users but i would like to use nt domain authentication. I have tested using nt domain authentication using one of our domain controllers but how do i contr...

I am trying to create AAA policy that will authenticate users via IAS but fallback to local DB if network is not available. I have successfully configured IAS to properly authenticate vty and console users but I get "access-denied" when using the sin...

Hi ThereIs it possible to "link" a SSID to a User Group in ACS 3.3 ?If there are 10 User Groups (Active Directory) in ACS and there are 4 SSID's, how can you prevent "Guest Users" from User Group 100 to connect to a non-Guest user SSID ? The Guest Us...

Hi Alluser1 >>>GroupA & user2 >>>GroupBRouter1 >>>NDG-A & Router2 >>>NDG-BNow, GroupA user must have "sh run" permission on NDG-A but not on NDG-B.GroupB user must have "sh run" permission on NDG-B but not on NDG-A.I created two shell command authori...

I would like to log the IP address of a wired client after a successfull login. I configured this on the 3750 switch:aaa accounting dot1x default start-stop group radius What else do I need ? In the ACS I can see a lot of details (client MAC address)...

Is there a way to map the authentication of an SSL VPN group on an ASA to a specific Group on an ACS server. I am trying to set up my SSL VPN groups to give a different SSL VPN access to different groups of users, but authenticate them all using the ...

Hello,I'm in trouble with this infrastructure:-ACS 4.1-Aironet 1231-PC con ADU-external user database Novell NDSAt the start, I try to use windows external database and EAP-FAST authentication with success, but, when I put only LDAP as external user ...

Is it possible to replicate between ACS V4.0 and ACS v4.1?

I have backuped database in ACS SE 4.1 but it's erro "Backup failed due to FTP error. The Server returned 550 C:\Documents and Settings\ducnv\Desktop : No such file or directory"have you got any erro same it?? if had, please help??thanksducnv

When trying to upgrade 3.3 to 4.1 I get the following error message:ODBC Operation faild with the following information: Message=[Sybase][ODBC Driver][Adaptive Server Anywhere]Datatbase page size too big, SqlState=8004, NativeError=-97Thanks

When my remote site customer adds a new device to an existing client group with a large number of devices, RADIUS authentication to that device fails; authentication is successful if moving that device to a smaller client group. Is there a limit in t...

Hi,We have one issue of ACS appliance IP address has been translated to a different IP on different segment through the firewall ASA and PIX and associated AAA client Cat2960 (IOS 12.2) on the ACS with translated IP for TACACS+ server configured with...

Hi, We want to integrate the WLC with ACS 4.1 using EAP FAST authentication. As of now, it is working fine with ACS 3.3. WLC side, I have configured the new Radius server & pointed it in WLAN IDIn ACS 4.1, I have configured as per the below doc.http:...

Hi there!We are using VPN 3030 Concentrator(vpn3000-4.7.2.L-k9.bin)and can't find where to enable and turn radius accounting update option? (like aaa accounting update periodic command in "common" IOS)Could someone help me?Thanks a lot!

I've got a vpn client authentication working with an ASA running version 8.03 to an MS 2003 IAS server using the following link. http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtmlHowever with this c...