Network Access Control

customer have a cisco secure acs release 4.2(0) build 124 patch 5 installed in a windows 2003 under netbios domain "bsbr" (fqdn bs.br.bsch)stations from this domain have sucess on authenticationusers from this domain have sucess on authenticationther...

Hi all,I have installed UCP 4.2 in windows 2003 Enterprise SP2 and i have encountered a problem of "CGI error ".I have searched about this error and got to know about the bug with this error, I have done the changes as per the workaround.Like changed...

I have a new router which about every 2-3 mintues tries to authenticate to the TACACS server. With variuos usernames like:rb: <rb: <Local_1> User Access Verificationown command verb: <USERNAME:>. ccess Verificationess Verificationcal_1> Username: am...

hello we have 2 dialup RAS. users use PPP to connect to RAS, obtain IP address then connect to some servers. RAS1 users should not connect to RAS2 an dthe opposit. dial-in users for both RAS are authenticated by the same ACS server. my need is: let R...

hi,I need some help to implement authentication of device's MAC Address (PC, laptop, IP Phone, printer) using ACS.My goal is to create VMPS like, but using ACS as authenticator of any devices connect to the network.Just connect devices to the network...

I have a totally isolated newly installed Windows Server 2008. It is the forest root, DC, GC, DNS and Netbios server and has ACS installed directly on it. When using local database in ACS user account it works great to AAA Tacacs Auth. When trying...

Hello I've got a few hundred edge user switches (mostly 2950s) which I've setup for AAA with ACS 4.0 to allow some technicians to access the edge switches and change speed/duplex/description and shutdown/no shutdown the fastethernet interfaces only (...

Hello Following a config guide I was able to edit a user group and send the parameters the ACE was expecting as to user, role and domain in order to authenticate within the right context and with the right privileges. This, though, was made on a test...

Hi all,We have a setup of ACS 3.3 & PIX 515e that work using Virtual Telnet to PIX. The issue is that when a user logs into using Virtual Telnet his downloadable ACL from ACS overrides the static rules defined in the PIX firewall ie. the static rules...

Dear all,I would like to use the asa with AAA auth. and bind to the Active Directory with LDAP, but there are many problems with the special characters in Germany (like ü,ö,ä,ß) and the same with the keyboard signs like 'Z' and 'Y'. The CISCO-ACS...

First, the only thing I saw on the Appliance was that it was a 'hardened OS'. So I'm assuming like many of their other appliances that this is Windows 2003 locked down? Regardless if it is or not, are there any issues with the appliance being in a mi...

One of my colleague accidently entered "aaa new-model" in device and the device got locked since no username/password was configured on the device. Now the device is locked and we can't login. Its a core device. Please let me know how to resolve this...

We just migrated from ACS 4.0 for Windows to ACS 4.2 SE.I'm wondering why would anyone want to make AAA traffic go through ACS if they could just make it authenticate against Windows AD directly through either LDAP or RADIUS?Doesn't this create an ex...

Hi all,I have created a document with my question. It includes network diagrams and switch configurations.Thank you in advance!!!