Network Access Control

Hi,I've put AAA config on a load of routers but now it seems that ISDN backup does not work properly. the interfaces come up but they won't properly authenticate with the ISP and get an IP address.I suspect that AAA is blocking this in some way. how ...

Hi,We encounter problem to implement NAC phase 2 with symantec.ACS is an appliance one, version 4.0We?ve installed the Symantec AV pair on the ACS : that?OK.The following softwares are installed on the client PC:- Cisco CTA : ctasetup-win-2.0.1.14.ex...

I'm doing a lab using Cisco ACS 4.1 LEAP Proxy RADIUS External User Databaser, and works fine but I don't understand why. So, I don't know if it's a stable solution.I have the following scenario:WinXP SP2 PEAPv0 (EAP-MSCHAPv2) |vCisco 3640802.1x Wire...

We currently have ACS 2.6 and a CSACS-.41-WINUP-K9 pack which includes the media for CSACS 4.1.1 and 3.3. I understatnd CSACS 2.6 must be upgraded to ACS 3.3 before upgrading to ACS 4.1.1.However, is it possible to upgrade from ACS 2.6 to 3.3 to 4.1....

Currently we have a ASA5505 and it's allowing all traffic out to the web. How do I block web traffic at night and weekends. Would a AAA rule be suitable? if so, how do I go about it?Thanks for any helpRich

Hello,I have ACS 4.1 installed on a Win2003 server. When I try to generate a self-signed certificate to be able to use https, then java applet stop to function. Pls advice what could be the problem? does anyone know?ACS: Release 4.1(1) Build 23JRE v1...

Hi, We have a problem with our ACS engines. We have 2 ACS Engines and the problem is we cannot disable it as a DHCP client. When its ethernet connection goes down, its IP address resets to 0.0.0.0. The static IP address that we set on it does not ret...

Hi all I am facing different issue with ACS 4.1 Applaince ---> My Configuration setting was working Ok for almost 2months , even we are taking backup of ACS 4.1 also . Now Issue what I am facing is that Users & Policies applied behave ok for some tim...

Can I configure an ACS to limit the commands available to Telnet sessions without affecting console commands. I.E. I want to stop commands such as WRI ERASE from being run from Telnet

HiI try to implement "Downloadable IP ACL" between 3560 (IOS 12.2(35)SE1) and An ACS Appliance 4.1.3.12 using Radius authentication of a user that want to connect on the switch.The authentication works fine and I can log to the switch without problem...

A customer has an ACS 4.0.27 for Windows 2k3 SP2 and added a new domain. By mapping the domain with a group of Cisco Secure should authenticate with the user of that domain and access devices group Cisco Secure, but always authentic in the group ID 0...

Hello!I have a problem with 802.1x (PEAP) authentication for wired clients. If the option "Log On To" in AD is enabled, authentication failed. Without this option everything works fine.I suspect that I'm missing something in ACS configuration which u...

I have an RSA v6.1 server running SecurID and Steel Belted RADIUS. This is performing authentication requests, via RADIUS, to a Cisco router at an ISP which hosts a PPP dial in service over PSTN.Currently I can dial successfully into the system using...

Hi I'm hoping I've missed something basic here. I have an ASA5520 (V7.0(7)) I have enabled (I think) enable authentication with the following command:aaa authentication enable console tacacs LOCALI can authentication to CLI ok with my ACS username/pa...