Network Access Control

Here's the config:aaa new-modelip tacacs source-interface Loopback0tacacs-server host 10.1.1.100tacacs-server directed-requestHere's the debug:R7#test aaa group t U1 cisco new-code Trying to authenticate with Servergroup tacacs+*Mar 1 03:17:17.816: T...

Hih All,I have recently aqquired a Cisco ASA device with the intention of setting up a CLientless SSL VPN Portal.My question is, can i control who has access to which portal page via LDAP Group membership?For now, we have a staff portal at device.dom...

Hello ,i have a remote vpn users connecting to our network and one vpn group can access specific servers ( controlled by access-list )and there are authenticated by ACS.the problem is that in the same vpn group ,some users should be able to access so...

Hi All,I am having a problem with implementing TACACS+ on the FWSM 3.1(11). The issue is, I can add the command "aaa accounting command privilage 15 group-name" but after adding i cannot see the username from the ACS server. The username displayed is...

When user login and authenticate through ACS they are dropped into the Group:Default instead of the group that I created for them.I have added wireless to our environment, I want to take advantage of using Radius and 802.1x to authenticate the wirele...

Hi,We have simple ACS deployment where we have a number of users throughout the world that require access to network devices.At present, I can manage access using custom attributes for specific clients, WCS, WLC's for example.What I want to do is lim...

I was looking at the requirements for ACS 5.0 VMware image and it states that the ESX server needs 600GB of drive space and that the ACS VM requires 500GB of virtual drive space.Why is this much drive space really needed? The 5.0 appliance only has a...

To allow an AAA user access to the "show config" command I have created them an account in ACS and assigned the relevant "Shell Auth Set" but it still does not permit them to use it?, I read that this may not be the command that the switch sends the ...

Hello,if it is possible we want to access all our applications (LMS, WCS, WLSE,...) over the TACACS+ integration and ACS.So we have a lot of "new services" under Interface Configuration -> TACACS+ (Cisco) -> New ServicesIs it possible to add more tha...

ACS is being used for AAA Authorization, and I have allowed a user to run "show command" but the ACS server always fails the request "saying command unknown"

I was use ACS 4.2 and to used external user database by the LDAP.The ACS could load English domain or name. But it couldn't Chinese dommin name.How do I to do ?