Network Access Control

I have a problem with ACS, I only want to give users access to gig1/0/1 but ACS matches 1/0/10, 1/0/11, 1/0/12...1/0/19 in my command set (the statement is set to permit GigabitEthernet 1/0/1). How do I tell it to match only 1/0/1 and nothing else?Th...

My customer wants to upgrade its ACS 2.6 to 4.2 without loosing its database. From the documetation I've found upgrade path: ACS 2.6 ---> ACS 3.x --> ACS 3.3.x -----> ACS 4.1.1.23 or ACS 4.1.1.24 ----> ACS 4.2However how could I get the old upgrade p...

Hi Guys,Can anyone confirm how TLS/SSL X.509 and PKI works. I have drafter the following from varios documents I have read and want to conffirm if this is in fact correct or is way off the mark? Wifi PC <---------------------------> Cisco ACSEnrolmen...

I have been able to successfully authenticate vpn connections with certificates from an ASA to ASA, and a pix to a pix. I am having problems though establishing a tunnel from an ASA to a pix 501. I was wondering if it is even possible to authenticate...

We just installed AnyConnect and want to use Active Directory to authenticate the users logging on to the network. I can create a user on the ASA and it downloads the software correctly. I can't seem to find the procedures to make it use Active Direc...

One problem I've had randomly come and go over the past two years occurs when I'm using Ubuntu Linux on my university's network. I log in through a web browser, and at some point between the next 20-30 seconds or so, I am redirected to the log-in scr...

Hi, I have configured AAA & 802.1X on my wired lan using MS IAS as the radius server. I'm trying to find if it is possible to find out from the IAS log file which slot and port the client authenicated is connected to.Is this possible?ThksThomas

I see no way to copy a group in ACS 4.2. Am I missing something?thanksBob

I have installed ACS 4.2 with patch 4Scertain period after authentication failed. Giving internal error. I need to restart all the services. What could be proble and pl help me in resolving this issue. I am running short of time.

Hi,I want Routers to be authenticated via ACS Box and if ACS Box is unavailable then only local accounts created on Router should authenticate...My setup allows Router local account authenticaion even if ACS Box is available...Please help to resolve ...

Hi,Does the folllowing lines means that initially the authentication would be ACS-Server and incase ACS-Server is down then it would allow router-local username/password [[ Is this True ]] aaa authentication ppp default group radius local aaa authent...

We have ASA 5550, Steel-Belted Radius and Windows 2003 Active Directory. I am trying to setup so that the users can change the password when the password expires. We have over 1000 users.I setup "password-management password-expire-in-days 14" in ASA...