Network Access Control

Hi EveryoneWe have a 7513 with FWSM module. It has 2 active contexts, one of which is currently locked out by AAA. Anyway to reset a context password without going into the maintenance partition?act/XXXXX/GTP2-and-SCTP2# sh runCommand authorization f...

I am attempting to change my key from the default value to a custom one. The problem I have is that one or more of my AAA server names are "Self" with an address of either 127.0.0.1 or the address of the other CSACS. When I attempt to change the ke...

We have cisco ACS 4.1 with password policy set as expire after 42 days.we are facing the problem when the password expires. Users who are doing ssh to switches/routers can not change the password after expiration,but same user when logging from conso...

HelloIs Cisco ACS capable of dropping users logged in vthrough a NAS. I have seen a purge option but I dont think this does the trick. I am looking at dropping a specific user from the CSACS ineterface. Also is it capable of showing what password has...

Hi,I have found that VPNC support RSA authentication using SDI (Security Dynamics International) but I'm wondering if there are limitations of this type of authentication !! have any body implement such scenario before ? appreciate any helpful commen...

Hi,Is there a way to check AAA authentication directly from ASA or Router for users.( AAA or Radius Server would be ACS )

Hi,Need help in configuring SPLIT tunneling on ASA and Remote Access VPN on ASA.Users will get authenticated through ASA using ACS. ACS will use AD as external Database.Just to understand where groups will be created required for Cisco VPN Client.

Hi,I'm using an acs engine 4.2 to authenticate http users by configuring the cut through proxy feature on an asa 5505. To authenticate the users, an external AD database is also used.The ACS, the AD and the remote agent are in the same vlan (inside) ...

I have configured UCP on a windows server according to the instructions mentioned in the Cisco manual.I have used a private address and the link is something like hxxp://172.16.0.51/secure/login.htmIt's perfectly alright when i access it from the int...

I'd like to hear your thoughts on whether AAA services for device administration (routers, switches, etc) should be mixed with AAA services for user services (like 802.1x) on the same server(s), or whether you think it's best to separate the two func...

Hi!Does anybody have any success with Cisco SSC and EAP-FAST in the wired network? I'm going to use NAC, so I'm trying to set up EAP-FAST. I see the pop-up window on the client to enter user credentials and I see a lot of "debug radius" messages on m...

Hi, I am trying to configure "User Groups that are exempt from passing machine authentication:". I use this for 7921 users. I have tried that if I put the user in default group and exempt the default group, it works fine.But if I put the user in grou...

Hi,My setup is woking great with One ACS Server, If I have another ACS Server as secondary then what additional configuration required on the devices and what parameters required for time-outWith IE 6.0 / 7.0 the ACS Console gets hang, currently work...

is the "AAA server group tag" the same as the proxy distribution entry.trying to setup my asa for tacacs+cisco# aaa-server ? WORD < 17 char Enter a AAA server group tag