Network Access Control

I am having problems implementing ACS to work with One Time Password (OTP) server. The problem is that there are multiple NAS devices, and ACS is not representing them with their own IP address but with ACS ip address which leads to security issues. ...

Hello All,Using an ASA 5510 Firewall edition has anyone been able to use port forwarding to get the Microsoft RDP client to connecto to terminal server on teh inside of a network when the user invokes an SSL VPN session? I have a customer that does ...

Hi,I just wonder if it is possible to configure ACS server to give users group who is having level 7 authorization commands the privilidge to do configuration change at the IOS routers managed by the tacacs, similar to the "privilidge level" commands...

I want to be able to permission certain groups where they can have full rights and all commands on their local devices and restricted commands on outside devices. In the Assign a Shell Command Auth on a per NDG basis, can I throw in their NDG in and ...

Dear all,We have some issues while integrating Windows AD with ACS 3.2 for Windows.Currently we have done the following:1. Installed ACS 3.2 for Windows on Windows 2003 Enterprise with SP12. ACS and Domain Controller are configured on the same server...

Hello,We recently purchased Cisco ACS for Windows, I was expecting to receive version 4.1 however the version on the CD-ROM was 4.0(1) Build 27.How do I go about getting to the latest 4.1 release? I don't see any upgrade downloads on the Cisco suppor...

Hi,I'm trying to set up dot1x with MAC authentication bypass (MAB) on a C3560, and I want the switch to send a SNMP trap upon authentication failure.Q: Can port security and MAB be combined in this way?-Leo

Hello fellow NetPros,I have a need to enable RDP with a public IP address. There will be an ASA 5500 and a Cisco 2800 series router in front of the Terminal server. What I would like to do is when users attempt to RDP to that particular IP address ...

Hello, I recently upgraded our ACS SEs from 4.0 to 4.1. All appeared to go OK but I checked the logs recently and saw the the database replication is failing with the message:ACS '[hostname]'is running a different version of ACS - aborting.All ACS SE...

Dear,how can i configure the AS5400 to Authenticate traffic coming from IP Address and pass other traffic comes from other IP Address pass it without Authentication.

We;re deploying the ACS as the means for authenticating our wireless users. The users have different domain that they're authenticating against and I have specified these domains in the Windows Database config. Can anybody please tell me the process ...

Hello,The purpose is to use a 802.1X authentication with ACS server, AD and high availibility.I have 2 sites with one AD with a 4 mega link bandwidth and one ACS for each site.I know that it is possible to use ACS active/passive mode with replicat...

dears,my company works as ISP and there are customers are using ADSL connectivity , i did my test but i can not access to ADSL i used follwing commands for AAA:aaa authentication ppp default group radiusaaa authorization network default group radiusa...

I'm setting up a new TACACS server and would like to use a wildcard ip address in the client configuration rather than enter all 242 devices (or import them in). Is there a reason why I shouldn't do this?