Network Access Control

I'm having a strange problem with a few routers sending invalid characters to my TACACS server. Example is it's trying to authenticate part of the banner. Here's the aaa config and part of the debug.aaa new-modelaaa authentication login default grou...

Hi,I am currently in the middle of installing CiscoSecure ACS 3.3.16 onto Windows Server 2003 for the first time.I am getting the error External DB account Restriction each time a client tries to authenticate.....Is there anything I should look out f...

Hi All,We have a NAS (AS5350) to provide dialup service for branch offices. Cisco ACS 4.0 (Radius) is used as the AAA sever. We would like to apply acl to the dialup client to control the access by using filter-id attribute. The acl can be applied an...

I have been trying to set up a switch to do the following:1) Use 802.1x port level authentication2) Assign VLAN to the client based on username/group3) Assign IP address to the clientI am using 3750 switches w/ IOS ver 12.2.25 and ACS server ver 3.3....

i want my local lan users to be authenticated through the pix before accessing any web/outbound servcies I do not want to use any external authentication servers is that possible

Hi all, i am facing an issue when i integrate my acs 4.0 with open ldap or domino ldap.i have configured external database and in unknown user policy i have selected the respective database.in group mapping i selected the created database and c...

Hi All,How can I configure a user-defined port to allow http access on a Cisco ASA 5510?Thanks

Does the ASA5550 support redundant AC power supply ?RegardsMohamed

We have enabled ODBC logging. The Authen_Failure_Code values come across as a numerical value and I am looking for a chart that would have the meaning of those numerical values so that I can have our database supply a verbose value in the field.

I have got PIX 501 Firewall Software versions 6.3I have adjusted ACS_3.3 server and now can authenticationenable password ciscoaaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (inside) host 1.2.3.4 ciscokey timeout 5aaa authentication telnet con...

Using csutil, I tried to transfer a user from one group to another (csutil -d -n -l)This was a testcase for later bulk import/export. after restart of processes, the changes are not reflected in the GUI, when I ask a csutil -d, the changes show in th...

DearPros,After i installaed the CSACS 3.3 on windows 2003 server,when i access it via web browser i am getting the following messagehttp://192.168.100.3:2002USERNAME :adminPASSWORD : adminLogin failed...try againI just login after the fresh installat...

Hello,here is my configuration of 3750 :aaa new-modelaaa group server tacacs+ ACCES server 10.99.4.1 server 10.99.4.2!aaa authentication login default local group ACCESaaa authentication enable default enable group ACCESaaa authorization exec default...

Does anyone have idea where to find information about automatic usage for expresions in ACS dates, version and so on from Symantec products ?I mean support for HCAP ACS with Symantec

I'm in the process of migrating ACS from Windows to an appliance. I did a recovery and I chose to restore the DBs and the system config. However, I'm getting emails from the appliance with the name of the old windows machine where ACS was running. ...