Network Access Control

Hi,we would to authenticate (with dot1x/mab) more than one mac address on a port. When a user connect his workstation the switch must put the workstation in a vlan and when the user start a vmware in bridge mode the swtich must be put the vmware in a...

HelLo !Could you please help me. I am testing asa 5505 with any connect client. Client authentication works fine with local database and against ldap server. But i cant get radius authentication to work. we have external radius authentication and it ...

my AAA commands;aaa new-modelaaa authentication login default group tacacs enableaaa authorization exec default group tacacs none aaa accounting connection default start-stop group tacacsaaa session-id commontacacs-server host [server address]tacacs-...

Hello;Could You tell me how can I configure ACS (4.2 version) as a proxy radius in order to move correctly all request to another ACS server ? I've tried many times according to documentation, but I have still received error "bad request fom NAS"prox...

We transferred our ACS Server from one machine to another and also migrates date to the new one. I just want to know what are the data or elements that are included in the data migration. Is there a documentation that states the above information?Tha...

Hi, I have implemented the TACACS in VPN VRF environment but the same is not working, I am not able to route the ACS servers IP's through the VRF-VPN. Configuration pasted belowaaa authentication login default group tacacs+ line aaa authentication lo...

New to 4.2 SE. Starting to add AAA client entries and do not see any option or even existence of an NDG table. Is there some back-door way to create device groups or did I miss an option somewhere to enable this feature entirely?The help file says it...

Hello,Has anyone migrated from ACS 2.4 to 3.x? If not, how else can you one get data from that version into the next?thanks!

Hi, a catos sends the message MGMT-5-LOGIN_FAIL: User [chars] failed to log in from [chars] to syslog in case of failed login. IOS doesn't send a message for failed login. Is there a possibility to get a simular message to syslog server in case of IO...

I'm doing some testing with a VoIP phone that is vpn connecting to a ASA that referencs a local ACS username. I've enabled the Voice-over-IP (VoIP) group and put this user into that group. I'm not able to find any docs on the Cisco website (or online...

I have to migrate the RADIUS service from a third party vendor to ACS 4.2. I have around 4000 users defined, all of them with a fixed IP address assigned. I know I can create a file containing users/passwords in order to populate the ACS user's datab...

Is there a way to drop a user directly into level 15 on ASA just like it on router/switch, meanwhile keep its username as original (don't change to enable_15)?