Network Access Control

I have an ACS 4.2 Server and an ASA 5540. I have setup AnyConnect SSL VPN on the ASA and want to authenticate users using AAA tacacs+ authentication with the ACS and an external Windows AD database. I have done this successfully. I also want to use t...

Hi,I'm currently running a Cisco ACS v3.2 on a windows server 2003 Pro with a safeword token server. I'm using PEAP (EAP-GTC). The problem is my client(Windows xp Pro SP2) gets disconnected 1 or 2 minutes after he connects to the access point. I have...

I understand that this should be dictated by a security policy/risk assessment, but I was hoping to get some opinions on this.The ACS is behind the Internet firewall. We are going to place it on a LAN so that it can be accessible throughout all the W...

I am running v4.1(23). No command accounting is being logged on the acs server. Found a bugid that supplied a workaround, said cmd and system must be in packet. Tried this and it is not working. Is there any other options I can look at.

I'm looking for a solution for starting with 802.1X for wired and wireless network in a live environment. During the migration I have to turn on port based authentication. But at that moment, the machine must have a valid user / computer certificate....

Is there a way to determine how many active wireless users are on the network by checking ACS? Currently our users need to re-authenticate periodically (about every 15 minutes), however, ACS shows no logged in users. There should at least be one -- M...

Hello Everyone,I am haivng a problem with getting an ASA 5505 to suthenticate directly against a w2k domain. There is no radius server involved. I am using Kerberos. We are getting an errors message back stating that the clocks on the ASA and teh ser...

we have the vpn users authenticate using RSA token , & ACS configured with RADIUS token server as the in the selected databases for unknown user policy ,the problem is when we updraded from ACS 4 to Release 4.2(0) Build 124 a problem happened , somet...

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?privilege exec level 15 no router????thx

Hi,Basically the problem is that I am working with old routers, checked already on feature navigator an the following commands are not supported on the router to communicate to a TACACS server that resides on a vrf:-----------------------------------...

I am looking for a similar configuration for my Cisco PIX & ASA to configure with Cisco ACS, with the below said commands I could able track what command a user has entered on the switches/router. Any help is highly appreciated for me to configure in...

Hi all! I'm having problem with configuration AAA authorization. I'm not authenticate from outside, output message "user none". But inside I can authenticate normally. Following configuration not working: aaa new-modelaaa authentication login default...

HiIs it true? TACACS+ will not work with 802.1x port authentication because EAP is not supported in TACACS+, Where to find the documents about Tacacs+ doesn't support EAP?Regards, Thanks.

Hi folks,I regularly get these messages from my ACS box, which is (among other things) supporting 802.1x / PEAP authentication for my wireless users.Note that the misspelling of "authentication" is intentional - e.g. the typo is in the syslog coming ...