Network Access Control

Friday I upgraded my CiscoSecure ACS from version 3.3 to 4.1. Upgrade seemed to go fine. Today I come in to find out that no one is getting authenticated. I have APs in WLSE configed with WDS that are not authenticating. I also have AP's not in W...

Hi,Currently my ACS is being integrated with AD and all the users can access my IOS devices (configured AAA). I only need one group in my AD to access my IOS devices and another group to use VPN access or any other authentications.Can anyone tell me ...

Hi,I would like to know what are the configurations required in Cisco ACS for authorization.I have done the foll configurations in the switch.aaa authorization config-commandsaaa authorization exec default group tacacs+ localradius-server host 10.240...

Dear SirI have an ACS and I have many switches in the network. I used to secure the telnet andenable access to these switches with tacacas+ authentication protocol. so the username andpassword is taken form the ACS internal database. Also the enable ...

Hi,Please can someone tell me how to bypass the boot password which the appliance ask for when the appliance is rebooted.Thanks.

I have routers configured with 2 bvi interfaces for dlsw.When I configure NAS setting with 2 ip address, sometime the AAA authentication failed to prompt for user authentication.Should I used ip tacacs source-interface?If I configure only one, if tha...

I am not able to authenticate the host connecting to the AP whcih is getting authenticating aganst RADIUS. Looks like shared secret key issue. Can any one help out? Log message says,(%DOT11-7-AUTH_FAILED: Station 0013.02c4.02d7 Authentication failed

Hi everyone!I want to authenticate to my Switch via Tacacs+. It runs fine as long as I define Users and passwords in the /etc/tac-plus/tacacs.conf. But when I try to authenticate against a MySQL DB or the /etc/passwd file, authentication fails.With t...

I have configured AP 1131 as a AAA client in Cisco ACS, and one user is associated to that AP, but ACS' "Logged in Users" is not showing any user though I am getting authenticated via PEAP.

I have an ASA, an ACS appliance, Active Directory, and RSA securID. SSL users should only authenticate with AD, while IPSec users should only authenticate with RSA. Not yet using anyconnect.here is my scenario:ACS -- AD - Dynamic users are created ...

We are running ACS 4.1.(4) Build 13 on a member server within a 2003 AD Domain.We get the following errors in the CSAuth.log file:AUTH 05/03/2008 17:21:15 E 0384 6180 0x24 External DB [NTAuthenDLL.dll]: NetUserGetLocalGroups failed with result [5]AUT...

I have ACS 4.1 integrated with Windows Database (check mark in allow Remote DialIn).When we terminate a employee do I have to also delete their ACS User Profile?If I delete the user in AD will they automatically delete the user in ACS?Where can I rea...

I configured an ASA as VPN using Windows IAS authentication. When using test aaa authentication command, I receive ERROR: Authentication no respond: no error. I can ping the IAS server? The configuration can be found this page:http://www.howtocisco.c...

Hi Experts,Could you please let me know how many concurrent connections ACS can handle at once?Is there any limitation on it?Our ACS version is 4.0 (1) build 27.Thanks in advance for your help and have a nice day!Regards,Gabor