Network Access Control

I have several groups of users defined in ACS but I cannot figure out how to go about specifying which network devices (AAA clients) these groups can log into.We use our ACS primarily to authenticate IT staff who need access to our routers, switches ...

I'm having a problem with a 3.3 to 4.2 upgrade. The steps I'm following are;1) install 3.3 on new server2) replicate production server db to new db3) upgrade to 4.14) upgrade to 4.25) apply patch 4.2.5I've done this in the lab and it's worked fine. ...

Hello,I have this configuration, and the fall back to local doess't seems to work (using telnet or ssh):username admin privilege 15 password ugawdfugagdfqfqfiqgfigqfaaa new-modelaaa authentication login VTY-access group tacacs+ localaaa accounting ex...

In the "System Configuration > ACS Internal Database Replication" I have selected the "Network Configuration Device tables" send entry on the outbound sender and the receive entry on the inbound receiver. The AAA NDG groups themselves come across OK...

I have an ACS v4.1 appliance. I basically want to create copies of all the AAA CSV logs to an ACS for Windows server. I can see how todo this if both are ACS fo Windows servers by using the Advanced Options>Remote Logging option and then defining the...

Hi, we have problem with our VPN users. When they log using cisco vpn, they get error and when we checked at the ACS - we are getting this message in the Report and Activity menu under Failed Attempts - External DB account Restriction ...Can you help...

Simple question: How much time approximately will a replication a Primary ACS server to a secondary ACS server will take, assuming around 200 devices (AAA clients)?

Can you use the ACS software to send remote logging using the Cisco Remote Agent on an external server (like you do with a Cisco ACS appliance). Can you do this process automatically?

I need help on the Authorization Set. I have the following currently configured.clear permit port-security dynamic permit port-security all permit port-security stickypermit mac-address-table dynamicConfigure permit terminalend exit show permit port...

How can ACS be setup to authenticate against the incoming RADIUS calling-station-id ? There will be hundreds of different unique devices - these are actually mobile phones and we want to authenticate using the phone number which appears in the callin...

We are recieving the following event logs every 1.5 hours or so:Alert from ACS1HQ on Oct 09 2008 at 07:35Service CSTacacs not running: will attempt to restartAlert from ACS1HQ on Oct 09 2008 at 07:35Service CSTacacs re-started OKIt appears the Tacacs...

Hi all, I have a question: recently I set up ACS 4.2 and configured on aaa client. Everything was working fine until one day the ACS went off-line. I was able to authenticated with the local account and go in enable mode, but when I tried to see th...

I have a Cisco ACS 4.1 with Users Read Only Access group. In the shell command authorization set I added "show" command and the users in the group are able to access most of the show commands but not 'show vlan' command. What changes should I do for ...