Network Access Control

we have hundreds of cisco devices on our network. we are currently deploying TACACS authentication/authorization on the network.The devices need to be grouped, and NARs need to be assigned to different groups of people.The network is very dynamic so ...

Need help in configuration so that the following requirements should be met:A set of target IP Addresses to be excluded in the traffic defined for a service (access to those IPs should be allowed, only that the traffic should not be qualified under s...

Sorry but any one know how to export the ACS local user database into a file? I only know it is only able to be displayed on the Window itself.

Is it possible for the VPN 3000 series Concentrator to generate the X.509 digital certificates or do you need to obtain the X.509 certificates from an outside vendor like Verisign? This is for an IPsec environment. Can the VPN Concentrator be used as...

i have acs 3.2 on windows 2000 server,in external database mapping i map one domain (group with ras users/dialin permissions) to dialup group.when the user is dialing he is not getting ras connection and whan i see his log in failed attempt it shows ...

I am attempting to authentication wireless clients via WLC6 via ACS SE 4.2 and this forum has provided me more information than Cisco Documentation. In trying to obtains a 30day free trial cert from RapidSSL.com, When I submit my CSR, Rapidfire tell...

Hello.I have a Cisco 2610XM with firmware version c2600-ipvoicek9-mz.124-15.T5.bin. Could someone tell me how to suppress the ALIVE accounting packets coming to my Radius server?.I have been trying using the command "no aaa accounting update" but it ...

Hello,I am trying to get http authentication proxy to work together with vpn client.I think I might have misunderstood how it is supposed to work, because in with my configuration, once the vpn tunnel is established, the user already has full access ...

ip tacacs source-interface command is not availabe on WS-C3560G-24TS ios 12.2(44)SE C3560-ADVIPSERVICESK9-M. it is available on 12.2(40)SE C3560-ADVIPSERVICESK. any ideas?

Dears ,We have an issue with our thrird party radius used for DSL user authentication , the radius server hanging when it receives lot of simultanious login . This happens when there is problem with Telco causing to disconnect so many users and when ...

Hi I have taken the gamble and upgrade to acs 4.2 from 4.0.1 which seemed to go ok, I have noticed a couple of issues, which i don't know if its just install or if its a problem everyone is having.In acs 4.0.1 i was able to log the database replicati...

is there a way to use public key authentication in addition to user based authentication in IOS similar to the authentication feature available in Linux where you can create a pair, copy the public key to the remote server and use your private key to...

Can anyone point me to a document on how to do a 3500 switch 802.1x configuration as well as a 2800 switch? How do you define the server auth-port? Thanks

hi , i'm installing ipphone on 3560 with 802.1x authentication and host mode multi-domain ,all works fine for ipphone but PC behind ipphone can't receive an ip address via dhcp although dot1x guest vlan data is configured, is supplicant and 802.1x au...