Network Access Control

IOS version c3640-a3jk9s-mz.123-18.binaaa group server tacacs+ cciesec server 192.168.3.10!aaa group server tacacs+ ccievoice server 192.168.3.11aaa authentication login VTY group cciesec localaaa accounting exec cciesec start-stop broadcast group cc...

Hello everyone,I am trying to get ACS to do MAC based authentication where upon client connection the switch forward the MAC address of the client to ACS to either authorize or unauthorize the port. I need to do this in an agentless fashion as most ...

Hi All, i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,like the followingWed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop task_id=3 service=shell priv-...

Can the ASA be configured to leverage XAuth against both SDI (RSA token) and Windows AD? It seems we can configure only one or the other but not both. For example, if we configure authentication using SDI, the VPN client only prompts for a username a...

I have a group in ACS that has limited level 15 access to NDGs. Under Unmatch Commands I have "configure", with "permit terminal" under unmatched arugs. This has been working fine for months.A week ago,this command stopped working. I've tried removin...

Hi: our group today adds new network device groups, devices, users manually to tacacs using Web GUI. I am trying to automate this process. I have the capability to connect to database and insert/update/delete records from our trouble ticketing system...

guys we have a radius server for authentocation......most of our swuctehs have following configaaa new modelaaa authentocation dot1x default group radiusaaa authentication login default noneguys my manager said that i shd use aaa authentocation login...

Hello, i need to convert ACS 3.2 from internal database (authentication) to active directory.i searched for the configuration guide but i can't find it.

Hi, I have just configured Cisco ACS for windows .In that i created two users, GUEST & ADMIN. ADMIN has all the rights but guest can only run "show" commands. Now my Bose is asking me to create different users & provide different priviledges to th...

Does anybody knows the explanation of the expresion: "failed to log accounting packet to any logging destination"Any reference to documentation, internet links, etc. helpful to understand if i have a problem or not would be very grateful.(I have run...

We have a configuration tool for typical router deployments. It is written in vb (asp) on a IIS web server. I would like to be able to add user accounts for remote vpn routers and devices representing new routers into ACS v.3.3 for Windows via some...

I have 10 devices and I want the administrative access to be authenticated agaist an ACS.There are 20 users who will be allowed to authenticate on them, but they must have different access like:User A access -> 1,5,8,9User B access -> 8,9,10And so on...

I have successfully configured 802.1x authentication on wired and wireless Lan. We have Cisco Switches, ACS SE and Windows AD.But i have one issue regarding the Single Sign on while authentication using the 802.1x with Windows Active directory the us...