Network Access Control

1. I've successfully got a Win2003 AD user to authenticate to the ASA via an ACS but the default group settings the dynamic user becomes part of don't get transfered to the user. How do I get the user to adopt the group settings?2. ASDM recommends na...

I just loaded one of my 3560-24PS with the latest IOS from Cisco 12.2(44) SE with advip services.What I notice on these switches is when I put in my AAA commands then I lose console access to my switch... it does not give me the option of entering a ...

I want to authenticate dial-up users with ACS internal DB using certificates which are stored on smart cards using EAP-TLS method.I use Microsoft Standalone CA to enroll certificates and configure ACS.But I cannot authenticate clients. ACS Logs says ...

Hi All,As I know, ACS can integrate into Windows AD and use the AD user database to authenticate users. But I cannot find out any document which informs that ACS 3.2 can support Windows 2003 R2 Active Directory.Do anyone know this?Thank you very much...

Hi,up to IOS Version 12.2(40)SE a source interface for tacacs could be configured with 'ip tacacs source-interface x.x.x.x' on a catalyst 3750 (advip image).Using IOS Version 12.2(44)SE (advip image) I'm not able to use this command anymore.Any idea ...

Hi,I and my associates have configured a Windows 2003 server with IAS to authenticate wireless users according to the entries in AD. The AD is on the same server, the authentication works fine when our router request an authentication for a remote-VP...

I have asa5510 with aaa accounting configured to microsoft IAS radius without authentication, the output is so confusing more that 40 columnsis there a way to know the records, at least the essential ones; session-time, bytes-in, bytes-outthanksElie

Hi,Does anyone have a working example of using FreeRADIUS to authenticate and authorise users for admin access.I have tried using the examples on the FreeRADIUS wiki to no avail although it's almost working. I'm testing the configuration with a 3550...

Hi Sir,I did a portscan on the ACS solution engine and found the following TCP ports are open on the ACS Solution Engine,Port - Services 49 - TCPwrapped135 - MSRPC1503 - TCPwrapped1506 -TCPwrapped2000 - Calbook2001 - DC2002 - SSL 2003 - cfingerd3389 ...

I have a 3020 VPN Concentrator with group locking setup as defined in the following article.http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a00800946a2.shtmlI am now trying to setup a new group for PPTP authentication but ...