Network Access Control

Hi,I enabled Local Certificate Authority Services on ASA5500 V8.02, VPN is working when I use Pre-share key to authenticate client logon. but it doesn't work when I use the Certificate. The following is ASA 5500 debug log, VPN client log and ASA 5500...

where can i download security software i can use for my network? (e.g. tacacs+, ACS, etc.) thanks..

Hi,I want to authenticate my pppoe clients using a radius server. PPPOE client sending a username and password as well as a Service Name (which is detected in Router debug as Service Tag <service name>. I want to send this Service Name (Service Tag) ...

I am using an Asa 5520 for remote access VPN. We currently use local groups for authenticating users but i would like to use nt domain authentication. I have tested using nt domain authentication using one of our domain controllers but how do i contr...

I am trying to create AAA policy that will authenticate users via IAS but fallback to local DB if network is not available. I have successfully configured IAS to properly authenticate vty and console users but I get "access-denied" when using the sin...

Hi ThereIs it possible to "link" a SSID to a User Group in ACS 3.3 ?If there are 10 User Groups (Active Directory) in ACS and there are 4 SSID's, how can you prevent "Guest Users" from User Group 100 to connect to a non-Guest user SSID ? The Guest Us...

Hi Alluser1 >>>GroupA & user2 >>>GroupBRouter1 >>>NDG-A & Router2 >>>NDG-BNow, GroupA user must have "sh run" permission on NDG-A but not on NDG-B.GroupB user must have "sh run" permission on NDG-B but not on NDG-A.I created two shell command authori...

I would like to log the IP address of a wired client after a successfull login. I configured this on the 3750 switch:aaa accounting dot1x default start-stop group radius What else do I need ? In the ACS I can see a lot of details (client MAC address)...

Is there a way to map the authentication of an SSL VPN group on an ASA to a specific Group on an ACS server. I am trying to set up my SSL VPN groups to give a different SSL VPN access to different groups of users, but authenticate them all using the ...

Hello,I'm in trouble with this infrastructure:-ACS 4.1-Aironet 1231-PC con ADU-external user database Novell NDSAt the start, I try to use windows external database and EAP-FAST authentication with success, but, when I put only LDAP as external user ...

Is it possible to replicate between ACS V4.0 and ACS v4.1?

I have backuped database in ACS SE 4.1 but it's erro "Backup failed due to FTP error. The Server returned 550 C:\Documents and Settings\ducnv\Desktop : No such file or directory"have you got any erro same it?? if had, please help??thanksducnv

When trying to upgrade 3.3 to 4.1 I get the following error message:ODBC Operation faild with the following information: Message=[Sybase][ODBC Driver][Adaptive Server Anywhere]Datatbase page size too big, SqlState=8004, NativeError=-97Thanks

When my remote site customer adds a new device to an existing client group with a large number of devices, RADIUS authentication to that device fails; authentication is successful if moving that device to a smaller client group. Is there a limit in t...

Hi,We have one issue of ACS appliance IP address has been translated to a different IP on different segment through the firewall ASA and PIX and associated AAA client Cat2960 (IOS 12.2) on the ACS with translated IP for TACACS+ server configured with...