Network Access Control

aaa new-modelaaa authentication login default group tacacs+ enableaaa authentication enable default group tacacs+ enableaaa authorization commands 15 default group tacacs+ if-authenticatedaaa accounting commands 15 default start-stop group tacacs+aaa...

Dear all, I configured 802.1x with an 2950 and IAS ins the LAB, everything is working finde with dynamic VLAN Assignement and Guest VLAN. I did the same with an 2948, I need to use it (mangement decission they don't want buy new one :-(( ) But I got ...

Hi,I cannot login using my ACS credentials on this firewall. I have a 1113 appliance running 4.2, and I am trying to setup a 5540 for AAA. Here is my config on the FW:ssh 10.12.1.96 255.255.255.255 insidessh 10.10.7.179 255.255.255.255 insideusername...

Hi,Need help is creating stored procedure inSQL 2008 to work with ACS for external DBauthentication.The script i got the cisco website complains about syntax errors.

Hello All,I am running an ACS 4.1 Appliance (1113). A couple of our administrators cannot add users to a group even though I have checked "Grant All" in their privileges. I get the following log in "activity""Administrator tried to access the "User l...

Hi all, I would like to do with the ASA makes the internet authentication for outbound traffic, but we know that ASA dosen't make cache.Someone know, if is possible to use the squid to makes only for web cache and ASA to do proxy service?Thanks

Our customer has a problem with auhtentication against Radius vhen he is using VPN or SSL VPN. Authentication on SSH or TELNET via RADIUS is working fine . When I configure on VPN (and SSL VPN) authentication against the local database, everything is...

We have an ACS 4.2, Windows AD and RSA SecurID.ACS--> External User Databae from Windows ADACS--> External User Database from RSAAll are good.All users from RSA are imported from Windows AD. What we need is to login as Windows AD authentication, but ...

I have ACS 3.3 and was trying to find a way to generate an e-mail whenever there is a failed login attmept.I have only found how to generate an e-mail when a user tries to login to a disable account and this is working.The report is populating on fai...

I have an ACS SE as the primary ACS, and ACS (Win32) as the backup ACS. When the remote agent on the ACS SE is off line the ACS SE denies login, how would I setup the ACS SE to not respond to requests if the ACS agent is offline

Copied configuration from 3560 to new 3560 defaults to the local enable password instead of using AAA/TACACS+ authentication.Troubleshooting:1. Verified configuration with known good 3560 switch.2. Verified switch is able to see TACACS+ servers (show...

how to differentiate between the console and http authtications in radius server while authenticating users for a pix firewalldoes pix send any attributes to the radiuss server to indicate where the user is trying to login?