Network Access Control

Hello, I want to know if the following scenario is possible:VPN Client installed in a laptop that needs a digital certificate to login into a device. The idea is that besides username and password the laptop needs a certificate to access the network ...

I have an ACS 4.2 Server and an ASA 5540. I have setup AnyConnect SSL VPN on the ASA and want to authenticate users using AAA tacacs+ authentication with the ACS and an external Windows AD database. I have done this successfully. I also want to us...

Hi,I'm currently running a Cisco ACS v3.2 on a windows server 2003 Pro with a safeword token server. I'm using PEAP (EAP-GTC). The problem is my client(Windows xp Pro SP2) gets disconnected 1 or 2 minutes after he connects to the access point. I have...

I understand that this should be dictated by a security policy/risk assessment, but I was hoping to get some opinions on this.The ACS is behind the Internet firewall. We are going to place it on a LAN so that it can be accessible throughout all the ...

I am running v4.1(23). No command accounting is being logged on the acs server. Found a bugid that supplied a workaround, said cmd and system must be in packet. Tried this and it is not working. Is there any other options I can look at.

I'm looking for a solution for starting with 802.1X for wired and wireless network in a live environment. During the migration I have to turn on port based authentication. But at that moment, the machine must have a valid user / computer certificate....

Is there a way to determine how many active wireless users are on the network by checking ACS? Currently our users need to re-authenticate periodically (about every 15 minutes), however, ACS shows no logged in users. There should at least be one --...

Hello Everyone,I am haivng a problem with getting an ASA 5505 to suthenticate directly against a w2k domain. There is no radius server involved. I am using Kerberos. We are getting an errors message back stating that the clocks on the ASA and teh...

we have the vpn users authenticate using RSA token , & ACS configured with RADIUS token server as the in the selected databases for unknown user policy ,the problem is when we updraded from ACS 4 to Release 4.2(0) Build 124 a problem happened , so...

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?privilege exec level 15 no router????thx

Hi,Basically the problem is that I am working with old routers, checked already on feature navigator an the following commands are not supported on the router to communicate to a TACACS server that resides on a vrf:----------------------------------...

I am looking for a similar configuration for my Cisco PIX & ASA to configure with Cisco ACS, with the below said commands I could able track what command a user has entered on the switches/router. Any help is highly appreciated for me to configure in...

Hi all! I'm having problem with configuration AAA authorization. I'm not authenticate from outside, output message "user none". But inside I can authenticate normally. Following configuration not working: aaa new-modelaaa authentication login default...