Network Access Control

Greetings,I would like to know if it is possible to authenticate VPN users via LDAP to a security active directory group. I know you can do this with the WebVPN and assign different VPN group policies, but I would like to either permit/deny login ac...

Hi currently we have configured tacacs+ server for controlling access for all routers and switches.we are going to add few more devices into our server in US office before adding this we need to ensure about the redundancy ,high availability of serve...

Hi, I'm trying to authenticate Juniper WX WAN Accelrator over Cisco ACS 4.1 using RADIUS.I get the juniper device to communicate with the ACS server, but cannot log in with my RADIUS user/passwordUnder ACS Reports and Activities - Failed Attempts, I ...

Here is a posting I put up yesterday, but when I thought the issue was resolved, I ran into another issue...replication would not succeed. At the end of yesterdays posting, you will see my newly added issues.=========================================...

Any guru here can help me on explaining a question about general authentication:Normally when the authentication passes, it takes little time to see the result but when it fails, it takes much longer time to get a fail message. Why is that so?

Hi There!I've got an Issue regarding to the Backup of an ACS Service Engine ver 3.3.3.11. A couple of days ago I've upgraded the ACS Service Engine from ver 3.2.2 to ver 3.3.3.1 following the upgrade path to finally have the 4.1 version installed. Th...

Hi all,I am experiencing a strange issue with tacacs authentication. Here are related commands for tacacs on the switch.===========aaa new-modelaaa authentication login default local-case enableaaa authentication login aaa group tacacs+ local-caseaa...

Hello,My setup as follows, I've ACS v4.1 integrated with active directory as external database. I've planned to configure the downloadable ACL on ASA to restrict the user's access, had been done successfully, seem its working fine but I have one issu...

HELLO ALL:We are having some problem with Dot1x.When users connect to Dot1x authentication port, users laptops are not getting authenticated with the server.I am attaching the debug output and running config .Thanks

I have 12 routers and 23 switches that I need to ACS to manage. Is there a quick way to deploy AAA on all the switches and routers instead of going in each one and configure it? I am new to ACS, so any help on how to configure would be great.Thanks

Selam,I want to deny all commands except "show run" for a group and for all network devices.So I created a group on acs4.1 and attached with a "Shell Command Authorization Set" ("permit show runnig-config" - "deny unmatched commands")than I used comm...

We are trying to use this command:telnet mypchostname.company.cominstead of telnet 10.10.10.10 255.255.255.255 insidebut the command is not working. Is there some other sytax that we need?Here is what the ? says from the asa:ASA(config)# ssh ?config...