Network Access Control

I am having a problem getting ACS to authenticate against Active Directory Usernames. I am trying to use AD names to logon to both a 2600 Switch and an ASA 5505. I can logon with ACS Local names without a problem. I have followed the External Databas...

Has anyone experienced problems with privilege level "Enable" password authentication via ACS using RSA two factor authentication? We have recently deployed ACS and use RSA two factor authentication for the telnet connection without any problems. W...

Hi, Gurus.we have ACS SE 4.1, configured NAP. The Profile should match the NAF and username. If I set ANY to NAF then it works fine, but if I set any NAF that contains required device or device group I don't match NAP and receive default settings.Wha...

HiI have 2 ACS SE 4.1 servers implemented to perform redundancy to client's authentication.The problem that I have is:I configured the 2 engines with IP addresses and also internal DB replication so the Primary ACS send replication data to the Second...

Hi, I have a WEBVPN (on Cisco 2811) which will authenticate its client using ACS, ACS in turn will be integrated with AD.the three components (WEBVPN, ACS and AD) have a firewall in between them, I need to configure to allow the communication between...

In response to the RADIUS request with PEAP/GTC sent by my client, in phase 2 exchange cisco ACS is showing a message which saysGenericEAP.dll->AuthenticationExtension] returned [13 - discard]what does this message mean? How can i change ACS configur...

What is the command so that when the username + password cannot be found in the microsoft isa server, the pix will look at the local database?This command works in the router, but I cannot seem to find the equivlant for the pix.aaa authentication log...

Hi, all I have setup a lab for aaa auth-proxy, ASA5510 version is 7.0, ACS 4.0; There are two problems as below: 1, after successful authentication by https via ASA's virtual services, the prompt page flash quickly, which even we didn't have time ...

I'm in the process of setting up TACACS+ AAA for our routers, which as a matter of policy use ssh instead of telnet for VTY access. It works correctly for telnet but not for ssh, though. The relevant parts of the config includeaaa new-model!aaa authe...

hi guysis possibe that cisco ACS give me a complete report of users internet usage and their visited sites?if not please introduce me a software to do taht and works with cisco routers.thank you

DEar Team,I have integrated Windows AD with CS ACS 4.1. When I am trying to login with the user in AD, " Windows Domain Controller Not found" this error is shown in failed authentication.Kindly suggest me the configuration tips

I have an ACS 1113 device at a remote site that I am trying to configure using hyperterm. I have a laptop connected on the com 1 port to the serial port on the ACS device and I am able to get connected. My problem is when I try to login at the promp...

Hi All, We use Cisco Secure Services Client, we are currently using 4.2, 4.051 and 4.2.1. We found that going from 4.051 to 4.2 really fixed a lot of issues but it broke one major option. Going from 4.051 to 4.2 or 4.2.1 the client does not ...