Network Access Control

Hi everyone:I have a issue, at this moment i have my ACS 4.1 running with authentication and authorisation. Also in a Switch i have the next lines:***************************************aaa accounting exec default start-stop group tacacs+aaa accounti...

Hi,I am trying to creat user group who are assigned for restricted access only for ping <ip> repeat command and show interface <x/x> at the user exec prompt .These users are not required to log with enable password to do this above task.Can anyone he...

I am trying to finalize testing on using LDAP to authenticate as opposed to using the Cisco ACS agent.I am obvioulsy not an LDAP guru so some of the attributes make no sense.How does one determine what goes in these fields: Is it an actual name or a ...

Hello,My Scenary is that I have configured 802.1X in Cisco Swithches C3750/C3560/C2960, I configured 802.1x in the all Switches, but i have 100 IP Phone Nortel with 2 ports one port connected to Switch and the other port connected to PC. I know that ...

HelloI'm trying to upgrade our Radius servers from 4.01 to 4.2. I install the CSCsh32888 patch, and then try to upgrade to 4.1.1.24, but get the error message "Directory in use by another Application". I have closed all unneeded services and processe...

Hello,I have many devices that are authenticated by ACS by one user account, it was required to seperate the access to security devices (firewall) from network devices (switches and router).i have created 2 users and used NAR. in this case i was able...

I'm using ACS v3.3 to authenticate my network devices. When I log into the managed devices, it takes me directly to enable mode. I looked through all the config options and can't seem to figure out why it would do this. Has anyone seem this before?

I am trying to configure the new ACS device, but I have challenge to make command set work. Shell profile works fine. Tacacs protocol is used. Could someone shed some light or provide a example, many thanks

I configured the Switch 3750 and ACS for 802.1x authentication. when I used the windows as the 802.1x client, it prompted "click here to enter user name and pasword for the network " as normal.The problem is that after I entered username and password...

Hi all,When configuring Cisco Secure ACS + Radius + 802.1x + AD, does I have to install the ACS and Domain Controller, in the same server (or virtual server)?If not, how do they communicate?Thanks in advance!!P.S. How about DHCP server?

I issue the commandaaa local authentication attempts max-fail 2Then I assign it to vty 0 4After 2 wrong attemps the user is locked out - how long is the information about the failed attempts stored? And what information does the router store?Is the l...

Hi,I would like to ask some question from the expert here.1. I'm building 802.1x infra for my customer.2. We are using ACS SE version 4.23. We have successfully integrate the ACS with AD using Remote Agent.4. Using will authenticate using PEAP MS-CHA...

Hi all,I'm unable to dinamically pass the Radius attribute , about assigned vlan, to 802.1x clients.I'm sure that everything is well configured but the only way to do it is configuring these attributes directly on user or group properties.When i try ...

Hi Everybody,I have Cisco ACS 4.2 for Windows, Installed and working. We have recently installed LDAP server in my place. Username / passwords of all the users are configured in LDAP The prime requirement is I am enabling WPA 802.1x authentication fo...