Network Access Control

Hello.I'm looking for a standard schema file to add to a OpenLDAP server to use with a ASA-5510 for VPN.Looking at:http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/extsvr.htmlthe examples are all for Active Directory, so not muc...

Hi allI have 2950-24 and 2950SX-24 switches. I upgraded them to the Latest IOS version availlable on cisco site(12.1(22)EA11). We deployed the mac authentication bypass technology in our organization. The problem is the commands (dot1x mac-auth-bypas...

have ACS appliance, I have made multiiple device group and add different region devices in it. I have redudent ACS running in my enviroment. BUt when i try to add AAA server in my different Device groups i got the error that host already exist. I am ...

I have 2 AD account in 2 domain, Singapore and China. Both dom are under 1 forest. Problem is when I used Cisco VPN to connect to Singapore firewall but used China AD account & password, authentication failed. But when I used Cisco VPN to connect to ...

umatched commands set to denycommand "configure" argument "permit terminal"user has full access to all. i just want user to adjust vty lines. I also have the following commandsshow with argument"permit run and start"thats all i have set up in command...

I have 802.1x setup on a Catalyst 2950 switch with Cisco ACS 4.2 Radius server. Authentication and authorization for machine authentication is working fine. I see the records in the "passed authentication" cvs file on the ACS server. Problem is, when...

Ok, I happened upon this today and thought it was a bit weird. We have a pair of ASA5520 as our primary firewalls. We are using EasyVPN,and the usernames authenticate via the local username / PW configured on the firewall. All of these usernames have...

I have ACS appliance, I have made multiiple device group and add different region devices in it. I have redudent ACS running in my enviroment. BUt when i try to add AAA server in Device group i got the error that host already exist. I am only able to...

Can someone kindly help me with the materials or documentation on Implementing IBNS on Cisco Catalyst Switches? I need to implement it correctly because the one I have done has not yielded the desired result. Systmes are not authenticated.Thanks.

Hi All,Currently, we're in the process of testing 802.1x on 3550 and 3560 switches. Things are going OK, but we are running into some problems. At the moment, we've made the following setup:- configure switchports for dot1x and put them in a guest VL...

Hi,We are trying to work out Lock & Key for our PIX 5.5e using "Virtual Telnet". We have two sites in question ie. two firewalls.For this the ACS is playing up as for site number 1, it's granting access when any NAR is assigned to the user. For site ...

I have configured Cisco ACS v4.1 to control network accessing. When a domain user logon, it takes a few seconds to logon using credentials. However, it takes around 1 minute to get the authentication successfully. The problem is the computer can't ta...