Network Access Control

Hi All, We use Cisco Secure Services Client, we are currently using 4.2, 4.051 and 4.2.1. We found that going from 4.051 to 4.2 really fixed a lot of issues but it broke one major option. Going from 4.051 to 4.2 or 4.2.1 the client does not ...

How can i enable message Authenticator attribute in cisco switch which gives additional security when doing authentication with MS IAS. I can enable that attribute in MS IAS when doing cisco switch as client but how can i enable that attribute in cis...

Hi,We have a Tacacs server (ACS 3.3) and Cisco 2811 Router (c2800nm-adventerprisek9-mz.124-11.XW2.bin). Configuring shell command authorization on ACS and works very well. I try to use different user priviledge level for different local users on the ...

I'm using ACS for authorization for a number of PIX and ASA. It seems the ASA do not support IP based NAR. I have FWSM and PIX on version 7 and they do work. Is there a fix for this? I'm using 7.2(3) on the ASA.

I am setting up a new ACS appliance (Cisco 1113). I followed the steps to setup a static ip address but when I do a show, it still says yes to dhcp enabled. I am on a working network, the ACS got a dhcp address. The system says new ip address set,...

Hi All,I've configured SSLVPN on Cisco ASA 5540 to authenticate using Windows AD by providing DomainController information. Though the authentication is working, I'm bit concerned about the security as this method of authentication mechanism would e...

Hi,Have anyone encountered this problem before? My radius is at 192.168.1.10 and R1 is on 192.168.1.1. Both are connected to a switch and ping works perfect. ACS has been configured with R1 as the AAA client with a key. I'm baffled as to why this doe...

We have 2 ACS appliances that are separated by a WAN.Both appliances are at the same software version and I have replication set up per Cisco's (as well as others') directions.When I run replication, I get the error "Cannot replicate to 'ciscoacs2' -...

Hi All! I have a problem with configuring feature "local aaa server" for remote ipsec. I can't found anything examples of settings local aaa server for remote ipsec on cisco.comI want that defined remote user, while connecting by ipsec, will receieve...

Most IOS configs (mine included!) seem to use passwords instead of secrets for local users.If password is weak, reversible encryption, and secret is md5, is there a reason other than habit why people don't use the stronger one?Just curious. Paul

folksi have an 1113 appliance and it has recently started falling over, i.e. it won't pass on radius requests or even let me log on by httpits running 4.0any guides/hints on how to troubleshoot itis there a newer OS availablethanks to anyone taking t...

Hi,When I tried configure enable level access per NGD, it doesn't work.Each time I see the same error:"TACACS+ Enable: Defining Max Privilige on a per network device group to be select".This error is the same if you don't select a NGD. ACSE ignores m...