Network Access Control

Hi,I have defined on the RADIUS server a profile with privilege level 0 with the "shell:priv-lvl=0" command on the server. The problem is that when the user logs into the firewall it is always given privilege level 1 (if SSH) or 15 (if ASDM).Th...

Hi,I have an ACS that authenticates and authorizes IOS devices.I use "shell command autorization set" to authorize some commands for some groups.Is it possible to do so with CatOS?For example, I'd like that the groupe FULL can access all command and ...

Hi,i have two Win2003 servers running ACS 4.1.I need to change the mail sender of notifications.I can i do ?Thank you.Mauro

When having different network admin, what will be the configuration/settings on the ACS to set one at a time login onto the cisco device?So that when a user already logged into the device, other users attempting to login will be blocked.

HiI use ACSWin4.1/tacacs+ and I want to restrict shell-users to specific NAS without defining all the NAS on the ACS server. I have only defined very few NAS profiles and the <other>-NAS-profile on the ACS-server because I do not like to maintain tho...

Hello,Since we are using a wlc 4402 we have problems with MAC authentication via RADIUS. Our MAC addresses are in an external LDAP database and this worked fine with IOS AP's. Now we receive an "Internal Error" in the "Failed Attempts" log. We use Ci...

Hi,Although I do not have re-authentication enabled and no RADIUS time-out attributes are sent to the switchport, the switch suddenly, for no reason, triggers a reauthentication after a few minutes. Sometimes after only one minute, other times it las...

In ACS 3.3 it was possible to specify the radius listen port with registry keys:[HKEY_LOCAL_MACHINE\SOFTWARE\Cisco\CiscoAAAv3.3\CSRadius]"AuthenticationPort"=dword:0000064e"AccountingPort"=dword:0000064f"AuthenticationPortNew"=dword:0000064c"Accounti...

Hello, We are looking for a way to authenticate vpn remote-access users on asa using 2 factors authentication. The first factor is username / password authenticated against a radius server. Second factor is a code matching an intersection on the grid...

Hi,We have 1 ACS Appliance 4.1It is being used 4 MAC authentication 4 AP. MAC addresse sare being configured in ACS & users are being authenticated properly. But i am unbale to access the web admin of ACS.I can access it via console port only. Is the...

Hi netPro,when i start the replication that's an error ,ACS Internal Database Replication ErrorsNumber Error 1 'User and Group Database' and 'Group Database' cannot be replicated together what does it means ?thanks.regards,Jack

I would like to use Microsoft ActiveDirectory (AD) to authenticateremote access users connecting to the VPN3005 concentrator. Everything is working fine but I want the VPN3k to usemicrosoft ds (tcp port 445) instead ofnetbios (tcp port 139) when it ...

i want to update ACS server from 3.3 to latest version ie 4.0 so what are the steps required.

Hi NetPro,what if my remote site ACS held as Primary as well, how do i start with Replication ?example : U.S Server A (Primary)-> support local site. <AAA>U.K Server A (Primary) -> support local site. <AAA>now, i want to replicate from U.S Server A t...