Network Access Control

HelloI have got problems with authentication in another domain.Root domain has got two child domain. ACS Agents are installed on two domain controllers in root domain.Authentication in one child domain is ok. Authentication in other child domain is n...

I have set up an ASA 5520 that will allow us to authenticate via SSH using Cisco Secure ACS. My issue is that once you ssh into the inside interface of the device, it will ask you for a login. I type in my domain account login and I SSH just fine. ...

I have configured an ASA running 7.2.3 code to do authentication, authorization, and accounting to an ACS server. The authentication and command shell authorization is working fine, but it seems that the accounting portion is not. Previously I was ...

Hi all,Does anyone know if ASA support more than 1 authentication server at the same time? I want to authenticate WebVPN users by LDAP and RSA SecurID. I mean WebVPN users have to enter the LDAP username, password and SecurID tokencode when login.Ple...

I IIS installef and working and I installed UCP 3.2 and I can connect to http://webserver/secure/login.htm but when I enter the username/password I get a message indicating the page address is incorrect and http 405 message. I went by the Installati...

HiI'm trying to set up Machine Access Restriction.I configured the ACS to allow PEAP Machine Authentication.Machine Access Restriction is also set to use de <No Access> group in case one of the authentication methodes are not ok.When computer (member...

Is it possible to configure switches to allow telnet when AAA servers are down? I can get into switches via console cable with both servers down since the switch will failover to the enable password. Is it possible to have telnet sessions failover ...

Hello all,I am using ACS 4.1 for MAC based authentication as to whether or not to allow a device on the network. It is working fine for most devies but for some of the Windows XP computers I have to disable IEEE authentication on the NIC and create...

Hello,What is the easiest way to deny telnet and ssh (management CLI access) to the network devices which are registered in ACS based on group levels. (excpet ACL).So access should be granted for Admin groups for all others not permitted. Other group...

Hi,Whenever we try to connect ACS with Windows AD as external database we get an error.Please help us in making this point correct.The screen shot is also attached.

I have configured aaa on two routers. When I telnet into them, one works fine with the ACS server. The other router returns a password prompt (enable secret). Both configs appear to have same aaa code. Is this an aaa issue?

Hi!I'm using PEAP authentication with the Active Directory. I have Cisco Secure ACS 4 and Cisco Aironet 1230 APs. The users use their Windows account to log in, but when I change the password in the AD the password doesnt change in the Secure. Anybod...

I have configured aaa command "aaa authentication login default group radius none" to cisco switch. If i shutdown windows IAS server where i have configure client(cisco switch) i can get in to switch because of that "none" condition. But if our IAS s...