Network Access Control

The problem is authentication reporting in ACS 4.0 when user atempt to log in AT switch with AAA configured. When user is logged in switch there is no informaton about that in "Logged-in Users" report page, but when logging is failed information exis...

I have a customer that has ACS v4.2 which is authenticating users for a Wireless LAN controller with 802.1x PEAP. We are able to get Machine Auth/User Auth working, but only with an OR operator and not an AND operator. We want it to be so that in ord...

HTTP Status 404 - /eforum/servlet/null

this is my AAA config;aaa authentication login default group tacacs+ enableaaa authorization exec default group tacacs+ if-authenticated local aaa accounting connection default start-stop group tacacs+aaa session-id commontacacs-server host 201.0.99....

Hi everyone:I have a issue, at this moment i have my ACS 4.1 running with authentication and authorisation. Also in a Switch i have the next lines:***************************************aaa accounting exec default start-stop group tacacs+aaa accounti...

Hi,I am trying to creat user group who are assigned for restricted access only for ping <ip> repeat command and show interface <x/x> at the user exec prompt .These users are not required to log with enable password to do this above task.Can anyone he...

I am trying to finalize testing on using LDAP to authenticate as opposed to using the Cisco ACS agent.I am obvioulsy not an LDAP guru so some of the attributes make no sense.How does one determine what goes in these fields: Is it an actual name or a ...

Hello,My Scenary is that I have configured 802.1X in Cisco Swithches C3750/C3560/C2960, I configured 802.1x in the all Switches, but i have 100 IP Phone Nortel with 2 ports one port connected to Switch and the other port connected to PC. I know that ...

HelloI'm trying to upgrade our Radius servers from 4.01 to 4.2. I install the CSCsh32888 patch, and then try to upgrade to 4.1.1.24, but get the error message "Directory in use by another Application". I have closed all unneeded services and processe...

Hello,I have many devices that are authenticated by ACS by one user account, it was required to seperate the access to security devices (firewall) from network devices (switches and router).i have created 2 users and used NAR. in this case i was able...

I'm using ACS v3.3 to authenticate my network devices. When I log into the managed devices, it takes me directly to enable mode. I looked through all the config options and can't seem to figure out why it would do this. Has anyone seem this before?

I am trying to configure the new ACS device, but I have challenge to make command set work. Shell profile works fine. Tacacs protocol is used. Could someone shed some light or provide a example, many thanks

I configured the Switch 3750 and ACS for 802.1x authentication. when I used the windows as the 802.1x client, it prompted "click here to enter user name and pasword for the network " as normal.The problem is that after I entered username and password...

Hi all,When configuring Cisco Secure ACS + Radius + 802.1x + AD, does I have to install the ACS and Domain Controller, in the same server (or virtual server)?If not, how do they communicate?Thanks in advance!!P.S. How about DHCP server?

I issue the commandaaa local authentication attempts max-fail 2Then I assign it to vty 0 4After 2 wrong attemps the user is locked out - how long is the information about the failed attempts stored? And what information does the router store?Is the l...