Network Access Control

I am creating a lab environment to test 802.1x prior to implementing it into production. I wanted to know what is the pros and cons of this security feature at layer 2? How does it really work behind the scenes?The reason why i want to implement thi...

Hi! I'm trying to auth my CA from my 880 cisco router, but get this message:"% Do you accept this certificate? [yes/no]: yesTrustpoint CA certificate accepted.%PKI-3-UNUSABLE_KEY_USAGE: Key-usage type 'Certificate-Signing' for cert with serial number...

Greetings,I am attempting to set up dot1x using the certificates on our CAC cards to authenticate. I have been able to set this up where when the smart card is inserted into the reader and after entering your PIN, the system will authenticate and le...

Hi,We have ACS appliance with this Application Versions :- Cisco Secure ACS : 4.1.3.12- Appliance Management Sofware : 4.1.3.12- Appliance Base Image : 4.1.1.4We must patch this appliance to 4.1.4.13.12Could you tell me if we can apply this patch wit...

Has anybody been able to change their credentials' password when AAA is done via TACACS and tagged to change their password at first login while accessing the network device through SSH?It works wonderful with telnet...

I want to authenticate telnet connections with TACACS +. This is my router configuration settings: aaa new-modelaaa authentication login telnetssh group tacacs+ enable local!aaa session-id commontacacs-server host 10.10.10.5tacacs-server host 10.10.1...

Hi Guys, we were hoping to resolve a vulnerability issue found in UCP version 4.0 that is fixed in version 4.2. Is it possible to upgrade only the UCP version and maintain the ACS version to 4.0? Or should we upgrade the ACS altogether?

Hi all,The other day I was configuring a test VPN 3000 with external groups that are configured on a RADIUS server, let's call one group SALES with group password 1234, which I have configured on the VPN 3000 as 'external' as well. I've assigned a fe...

Hi I need to know what the config is to use Caller-ID as authentication and Authorization. Can anyone help me out.

Is there a way through ACS to limit user logons to only specific devices? I know through NAR, I can restrict the source address, but how can I restrict the destination?Thanks