Network Access Control

Selam,I want to deny all commands except "show run" for a group and for all network devices.So I created a group on acs4.1 and attached with a "Shell Command Authorization Set" ("permit show runnig-config" - "deny unmatched commands")than I used comm...

We are trying to use this command:telnet mypchostname.company.cominstead of telnet 10.10.10.10 255.255.255.255 insidebut the command is not working. Is there some other sytax that we need?Here is what the ? says from the asa:ASA(config)# ssh ?config...

Hi experts,I have a few questions regarding 802.1x & MAC Authentication Bypass configured on ACS 4.2.i. Is it possible to configure MAC authentication + 802.1x on ACS 4.2 at the same time? Here is the scenario;Our company would like to enforce 'doubl...

We currently have the ACS 3.3 windows version running. We want to migrate to ACS4.2 appliance. Is there a migration tool that I can use to get the Appliance to recognize the DB backup file from our ACS3.3 windows version? Can I put this in a cvs file...

Hi,I've an Access Control Server Solution Engine 1113 vers 4.0. Is there a method for loading a file with users (40.000) and their attributes (IP address, DNS server and so on...)? I know that for ACS (not for solution engine) there is an util (csuti...

We are trying to use this command:telnet mypchostname.company.cominstead oftelnet 10.10.10.10 255.255.255.255 insidebut the command is not working. Is there some other sytax that we need?Here is what the ? says from the asa:ASA(config)# ssh ?configur...

I've just upgraded to ACS 4.1 and am using a Network Access Profile (NAP) to ensure wireless users are authenticated against a Windows AD only (we had issues with overlapping user names for token-based access to other systems). I've had to add the in...

Hi,Can anyone tell us to integrate Active directory 2003 with Cisco Call Manager 5.1.3We are very new to this areana. hence please guide us if its possible to make it.Thanks in advance

I have configured the pix firewall for ACS authentication and command authorization, everything is working fineaaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ (inside) host 172.28.x.x x.x.x aaa-server TACACS+ (inside) host 172.28.x. xx aaa a...

I have pix 535, i want to configure it for ACS authentication, but problem is that, users tries to login from inside interface and ACS located on outside interface of pix firewall. I have configured the following commands but still not able to get th...

I have configure Cisco ACS v4.1 to control network accessing. When a domain user logon, it takes a few seconds to logon and map the network drive if it is conencting to a port without configued autnetication. However, it takes around 30 seconds to 1 ...

i m not able to configure the command authorization. I obey the pattern that u send on the fourm, I did the same but still not getting user is able to do all the tasks. i made a command authorization set as mentioned with show and deny it with unmatc...

In the current situation, IP phone authentication is done using ACS local DB.What we want to do is forwarding devicename & paswd through our ACS to an external DB (Windows, ldap or other). Do I need to create an av-pair in IOS-radius, VSA 26 which co...