Network Access Control

Hi, I configured the router to authorize all copy commands. Under ACS I need to allow only copy run: start: and Copy run scp: When I added under urguments: permit run: startup: permit run: scp:it works fine for first one but for scp it will not.When ...

HI,Can anyone guide me how to configure windows authentication & authentication server in multidomain scinario?Actually I have two domains.Different user roles should be authenticated by different domains.Once the user is authenticated by a domain he...

Hi AllI need your help. I have to configure the ACS Server so that the network administrators can use their windows/Domain accounts to login to the network switches and routers. I have created 2 groups, one is the general and the other one is for net...

I have most of my customers Network Devices set to use tacacs+ thru an ACS server to authenticate Remote Admins whom ssh to these devices.I was attempting to set up a cryptic password as the authentication means for Console access to any of the devic...

Tacacs authentication doesn't work after passing thru GRE tunnel with Crypto map.

Dear AllI have a query regarding Cisco Remote VPN Users who are connecting to ASA box where i have created VPN groups (and IP Pool)and ACL are created and assigned to those groups .However for authentication , i have configured that group for TACACS ...

Hi all ,This is my first post.I am a newbie in this feild with a vague idea about EAP.I wanted to understand the EAP authentication process.Let me explain EAp in a way in which I understand.Please correct me or suggest some docs which I should refer ...

nac 802.1x, CSA in test mode, trust agent 2.103, CSSC 5.0.2.3At implantation nac 802.1x there were following problems:Some computers after passing machine authentification long cannot receive ip address (about 3 minutes) and Windows roaming profile d...

I have problems with same topology over ACS. I have two domains in diferent Active Directory, we map those domains. Then in the Active Directory we create two groups for both domains. One for users names and passwords and another wich contains the PC...

Is there a way to modify the default behavior of the automatic logouts? I have the user set for 1 simultaneous login. If you try to login with that same account again elsewhere, the first logged in user's connection is forceably closed. I would like ...

I'm having trouble getting the internal HTTPS server to use AAA for authentication. I have a working AAA setup for VTY access using TACACS+ but I can't seem to get HTTPS to work.aaa new-modelaaa authentication login console noneaaa authentication log...

I am trying to enable 802.1x on one ofthe switchports of the Cisco Catalyst 2960:C2960#sh run | i radiusaaa authentication login test group radius localaaa authentication dot1x default group radiusradius-server host 10.250.97.26 auth-port 1812 acct-p...

Hi,Anyone know a good doc for this?Thx,Marc

How can I force the users of my ACS to change thier passwords after the first login??

Does anyone know how to disable username caching in ACS 4.1? We have a problem with password changes initiated from Active Directory. When we clear the dynamic users after the password change all works well, but we do not want to 'build' the dynamic ...