Network Access Control

Hi,We have one issue of ACS appliance IP address has been translated to a different IP on different segment through the firewall ASA and PIX and associated AAA client Cat2960 (IOS 12.2) on the ACS with translated IP for TACACS+ server configured with...

Hi, We want to integrate the WLC with ACS 4.1 using EAP FAST authentication. As of now, it is working fine with ACS 3.3. WLC side, I have configured the new Radius server & pointed it in WLAN IDIn ACS 4.1, I have configured as per the below doc.http:...

Hi there!We are using VPN 3030 Concentrator(vpn3000-4.7.2.L-k9.bin)and can't find where to enable and turn radius accounting update option? (like aaa accounting update periodic command in "common" IOS)Could someone help me?Thanks a lot!

I've got a vpn client authentication working with an ASA running version 8.03 to an MS 2003 IAS server using the following link. http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtmlHowever with this c...

HiI am having problems making ACS 4.1 record user command information to the tacacs+ log file. I have set both the cmd and cmd-arg fields for the log but all I get is this:Date Time User-Name Group-Name Caller-Id Acct-Flags elapsed_time service task...

Hi Sir,I have the following AAA accounting commands on an IOS device:aaa accounting exec default start-stop group tacacs+aaa accounting commands 15 default start-stop group tacacs+aaa accounting network default start-stop group tacacs+aaa accounting ...

Hi, I have a Cisco RADIUS to RSA (Steel Belted) RADIUS question.I have just added a new Dial-In service to our existing RSA /RADIUS SecurID v6.1 server. The dial-in service is hosted by a service provider and once a PPP session is established a RADIU...

Hello,I am having problem while configuring AAA on PIX running IOS Ver.6.3 for administrative access through Telnet.I enabled AAA commands for telnet on PIX and associated to ACS 4.1 Appliance and tested authentication using both RADIUS and TACACS+ i...

I have set up my RSA RADIUS server to authenticate logins to my Cisco device(s). And, I have managed to limit which users can login (by assigning them to a Group in RSA and then Activating that group on the router Agent Host). Works fine.The last t...

Hi Sir,I have deployed an ACS Solution Engine 4.1(1) Build 23 to provide AAA services for routers/switches login.I'd like to create a user group that is restricted to only "show" commands when the users log in to the network devices.I have done the f...

When accessing the reports on our ACS, for example, the Passed Authentications report, the .csv file is just too long. Is there something I could that that would cut the future reports down by month. So each .csv files would be for 1 month. I want t...

Hi,We're using AD SSO, is it possible to choose a role based on the host rather than the user.For example some users have desktops and laptops but each run different software so will need separate policies.Is this possible using AD/LDAP?Thanks.Jim.

Do you have a complete user guide for ACS server that I can print out?

I configured AAA on all my devices and i need to disable the accounting for my username on ACS.How can i do that?