Network Access Control

I've setup the TACACS server with two groups-FULL admin rights-READ only rightsTwo users have been created-admin_test-read_testThe admin_test config works fine on AAA but i keep getting stuck with read_test configs. I can never get to enable mode eve...

DearsWe have ASA in our network and it's configured as VPN gateway, ACS server is configured for users authentication and authorization. Now the VPN user will try to connect to the network he will be authenticated through RADUES on ACS, then the down...

Hi everyone,I have the problem that Cisco routers and switches do not send some accounting commandinformation to ACS.Accounting commands do not send to ACS are "show log" and "show version".Accounting commands send to ACS are "show runn", "conf t" an...

Hi,I am trying to get downloadable ACLs to a PIX firewall using ACS version 3.3 to PIX 6.3(4) IOS version:Here is my config for the PIX:aaa-server ACSACCESS protocol tacacs+aaa-server ACSACCESS (inside) host 10.25.0.30 c0nn3ctm3 timeout 15access-list...

If I have configured downloadable ACL on ACS group, then one of the users who is belong to same group has assign particular ACL on his profile. Which one will be pushed to the router is it the group ACL or user ACLMany Thanks

If I require a second server in stand by mode for redundancy do I require 2 x CSACS-4.1-WIN-K9 or is there a a standy licence for the Cisco Secure ACS

Hello,I'm trying to test importing ACS users from the "accountActions" table in a database using RDBMS Synch on a single disconnected test server using ACS 3.3 Win 2000 Svr. When I synch manually, it requires a Synch Partner which I do not have. How...

Hi everyone,I have a question about the differentiation of ACS for Windows and ACS Solution Engine.Software version of each is;ACS for Windows 4.0ACS Solution Engine 4.1.1 build 23and I access ACS Solution Engine via WEB console (http access).- Diffe...

Hi group,I am trying to get access the a cisco 2621 via http and authenticationvia AAA but there is something I am not quite understand.I am using the freeware TACACS+ server running on RedHat LinuxEnterprise Server 3.0. I setup the TACACS+ account ...

ACS v. 3.2 supported NDS as userdatabase. Version 4.0 and 4.1 does it only via LDAP, and LDAP does not support MSCHAP.Can someone tell me when ACS will fully support NDS ?Regards Johann Folkestad

Does anyone know when/if Cisco plan to let LDAP support PEAP(mschapv2)? We are running Novell, and it seems that we have to use Freeradius because PEAP w/mschap v.2 is not supported when LDAP is the userdatabasehttp://www.cisco.com/en/US/products/sw/...

Hi,We are using Cisco Secure ACS and for the past week, our switch and router logins are really really intermittent. Most of the time, even if we are into the console already and issue a command, "authorization failed" will appear then just keep pres...

Hi,I am running ACS Release 3.3(1) Build 16 and am having a weird problem with our wireless users.A few of them get kicked off the wireless network after a few minutes and I look through the logs and get the error "User exceeded max sessions" but the...

When I start up my computer and log in with a wireless connection, it takes a few minutes to actually get the Pop-up that states if I am secure or not. Is there a way to speed this up?

Hi,I use AAA server Cisco ACS. Network admins are authentictated by ACS when they create VPN connection (terminated on VPN Concentrator) and second, when login on network devices . But I need authenticate some other users - servers admins - when they...