Network Access Control

Applying the below to a Catalyst 3560 switch, I can only telnet/ssh using 10.1.0.1. Host 10.1.0.50 telnet/ssh is blocked.Please advise.access-list 101 permit host 10.1.0.1 any eg 22access-list 101 permit host 10.1.0.1 any eg 23access-list 101 permit ...

Is it possible to have muplitple Radius shell: AVPair entries for a single user/profile? I want to be able to use 'shell:priv-lvl=15' to manage our switches and 'shell:Admin=Admin default-domain' to manage our ACE's. What I am finding is that when ...

Hi, I am looking for ways to save the current configuration and to retrieve it for later purposes. Is it possible to do so? We have only one CAR and multiple people are using it. So the CAR has to re-configured for different people purpose. It...

Hi,I've got some problem.I have vpn router as vpn server and also ACS to authenticate vpn remote user(cisco vpn client).And the goal I want is to limiting user access for several ports.I try with Filter ID, Cisco AVpair, and also downloadable ACL, bu...

Need help setting up tacacs+ for Catalyst 3560 and 6506 switches using Cisco ACS v4.1. Can someone post ios examples.ThanksRequirement: 1. login to switches with Cisco ACS account2. login to switch with local switch username & password

I was disappointed to see that the ASA5505 does not support NetFlow. Is there any other good one to keep internal hosts monitored?

I have multiple wireless networks. I am building a guest wireless network. I would like to assign a guest a username password. When the guest connects to the SSID (guest network) they are prompted for username password and assigned the correct gue...

Hi,What should I do to upgrade the ACS 4.0(1) to the latest version 5.0 on Windows 2003?Will I be able to retain the user groups and associated policies? Where to obtain the update S/W?Do we get an update S/W or the complete pack for Version 5.0... P...

Hii look for a solution to check if a connecting remote access client device is corporate device or not before the vpn connection is permitted.I want to use the standard Cisco VPN Client (IPSEC) and use the "IPSEC-over-TCP" feature and change the IoT...

I set up a Shell Command Authorization Set. I want to give someone access to enter "configure terminal" and any "mac-address-table static *" commands. Unmatched commands: Denyconfigure -> permit terminalmac-address-table -> permit staticI built a gro...

Hi, I'm using ACS with a servers connected on a Catalyst 6509-EI want that the authentification use the Mac Address (Auth by Mac).But the catalyst does'nt allow this Command Line : dot1x mac-auth-bypassIs there any solution for this?The IOS is : s72...

We have ACS 4.1 in network. We have some user w0rk from home. they can access corporate network using Cisco VPN client. Issue is some users copy the van client software and profile on their Home PC/Laptop and access the network instead of using the...