Network Access Control

Loging into a Cisco switch I want the below options to work. Im using Cisco ACS v4.1 and a cisco 3560 switch.Is this possibleSwitch login options:1. TACACS+ server authenciation (Cisco ACS) --- 2a. TACACS+ server fails (Cisco ACS) - use local switch...

Is their a way to create a command authorization set that would allow all commands in the enable mode, but deny a user from entering into the global configuration mode.I see read-only examples of just allowing a few commands, such as show, exit, & de...

Hello!We have ASA with software 7.2.4 configured for AAA on ACS v4.2. Configuration is as follows:aaa-server TAC protocol tacacs+aaa-server TAC (mgmt) host 192.168.1.11key ciscoaaa-server RAD protocol radiuskey ciscoaaa-server RAD (mgmt) host 192.168...

We were using csv files (accountActions format)to import multiple network devices into ACS. Someone put in the wrong shared secret in the import file. I am trying to update the database using the 224 action code. I get a sucessful sync with 300+ tran...

We have a Cisco Windows ACS server that we currently use for many purposes. One of those is that we add the mac addresses of everyone authorized to be on the wireless network and then we have our Cisco WLC use it for authentication.My question is, is...

I m trying to configure download able acl in ACS for my remote access vpn user.My concentrator is able to authenticate the user via ACS but after getting the ip and authentication client is not able to reach anywhere.I have attached the downloadable ...

Cisco ACS Documentation claims that Cisco devices running IOS version 12.3(8)T or greater support Downloadable IP ACLs.However is almost impossible to find a documentation regarding this configuration.The only documentation available are those descri...

If using the Cisco ACS local database with Cisco VPN Clients is there, in any version of ACS, the ability to have the password for the account expire causing the user to have to change the password?

can anybody provide me a link or pdf document ,video from which i can easily understand about ACS and Cisco LMS.Thanks

Applying the below to a Catalyst 3560 switch, I can only telnet/ssh using 10.1.0.1. Host 10.1.0.50 telnet/ssh is blocked.Please advise.access-list 101 permit host 10.1.0.1 any eg 22access-list 101 permit host 10.1.0.1 any eg 23access-list 101 permit ...

Is it possible to have muplitple Radius shell: AVPair entries for a single user/profile? I want to be able to use 'shell:priv-lvl=15' to manage our switches and 'shell:Admin=Admin default-domain' to manage our ACE's. What I am finding is that when ...

Hi, I am looking for ways to save the current configuration and to retrieve it for later purposes. Is it possible to do so? We have only one CAR and multiple people are using it. So the CAR has to re-configured for different people purpose. It...