Network Access Control

Dear AllI have a query regarding Cisco Remote VPN Users who are connecting to ASA box where i have created VPN groups (and IP Pool)and ACL are created and assigned to those groups .However for authentication , i have configured that group for TACACS ...

Hi all ,This is my first post.I am a newbie in this feild with a vague idea about EAP.I wanted to understand the EAP authentication process.Let me explain EAp in a way in which I understand.Please correct me or suggest some docs which I should refer ...

nac 802.1x, CSA in test mode, trust agent 2.103, CSSC 5.0.2.3At implantation nac 802.1x there were following problems:Some computers after passing machine authentification long cannot receive ip address (about 3 minutes) and Windows roaming profile d...

I have problems with same topology over ACS. I have two domains in diferent Active Directory, we map those domains. Then in the Active Directory we create two groups for both domains. One for users names and passwords and another wich contains the PC...

Is there a way to modify the default behavior of the automatic logouts? I have the user set for 1 simultaneous login. If you try to login with that same account again elsewhere, the first logged in user's connection is forceably closed. I would like ...

I'm having trouble getting the internal HTTPS server to use AAA for authentication. I have a working AAA setup for VTY access using TACACS+ but I can't seem to get HTTPS to work.aaa new-modelaaa authentication login console noneaaa authentication lo...

I am trying to enable 802.1x on one ofthe switchports of the Cisco Catalyst 2960:C2960#sh run | i radiusaaa authentication login test group radius localaaa authentication dot1x default group radiusradius-server host 10.250.97.26 auth-port 1812 acct-p...

Hi,Anyone know a good doc for this?Thx,Marc

How can I force the users of my ACS to change thier passwords after the first login??

Does anyone know how to disable username caching in ACS 4.1? We have a problem with password changes initiated from Active Directory. When we clear the dynamic users after the password change all works well, but we do not want to 'build' the dynamic ...

We use a CSC module in our 5520 ASA. The module generates the next error message: “Module in slot 1 experienced a control channel communication failure” and sometimes lets the ASA hang. Only a hard reset gets the communication going again.A reset...

Hi All,This is aimed at universities really..Just wondering if anyone has got eduroam working using CiscoSecure ACS?If so....how?

I have configure the ACS with tacacsbut I am not able to see complete logging of all commands that I am using during the session. I configure the following things on routeraaa new-modelaaa authentication login default group radius localaaa authorizat...

Hello guys,I tried to configure the CAT3560 Switch with IAS Windows 2003 AD authentication without success. Is it possible at all??If so, do I have to use Standard RADIUS in the Win 2003 IAS or Vendor specific type. I was looking in Internet and got...