Network Access Control

We have an ASA running 7.0(6)8 and use CSACS v4.1 For remote access, we have VPN groups set-up on the ASA. Our remote users connect to our network, are authenticated via the CSACS server, then are assigned an IP address from the relevant address pool...

Hi,I have ACS 2.4 Running on Windows NT.Building a New server Running 2003. Installing ACS 4.1.How do I get the Configuration off the old server onto the New ACS install (user Settings,Groups and NAS). ThanksDave

We are able to authenticate users against edirectory with the current set up, however, we are trying to limit the access to a specific group w/in ldap. We are using the "customer name" of groupMembership and 'cisco-name" of IETF-Radius-Class. The pro...

HiMy radius config is "aaa authentication login default group radius localaaa authentication login if_needed group radius local" If_needed is configured to console port. If my radius servers are down and i try to get in to cisco box i dont get any me...

The ASA 5540 primary unit is totally dead. Now the seconday is active now. While waiting for the RMA from Cisco. It is my first time to replace the ASA. I have the following questions:1. should the version of replacement ASA be the same as the curren...

I am trying to implement LEAP authentication on Access Point. I have a Cisco ACS 3.1 which is integrated into Active Directory. I would like to use group mapping feature for authentication. Ie:- I have created a NT group in active directory and added...

Just fired up a new Windows WCS install and have been trying various optoins to get it to work with ACS (for admin only at this point). I've tried RADIUS (IETF) and tacacs+(Cisco IOS) with various failed attempts logged in ACS. Any ideas what I'm mis...

I executed the csutil -d to get a copy of the dump.txt for some scripting. It asked me for a password so I hit <enter> because I do not want it password protected. At this point, I cannot copy the file to anohter computer but yet I can copy it to the...

Hello,Im trying to implement Downloadable IP ACLs with ACS 4.1 on 2811 router for PPTP-users, but it seems - router cant apply this ACLs and i dont know why.IOS version on router:Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version ...

Hi,I am using Tacacs for AAA accounting.I have customer network NAT behind a single IP address and hence I am getting report from all customer device showing single IP.Based on the logs I cannot identify on which device the command was executed.I can...

Looking to see where I would enter my contract info to order the upgrade Cd for our maintenance on ACS 4.x

we have primary and secondry acs severs. suddenly replication between primary and secondry is not happening. I am unable to troubleshoot this, so we have decided to install and configure acs freshly. but almost 350 devices are configured in network d...

Is it possible to setup multiple user group to associate different local users for different access?The aaa group only allow tacacs and radius but no local.Or, I can create multiple "aaa authentication login" list but how to associate each list with ...

Hi, everyoneI have a puzzle with ASA auth-proxy authentication timeout. I want to achieve the inactivity timeout, that is, when there are some traffic btw client and host through ASA after user authenticated, cache timeout timer don't work. When traf...