Network Access Control

I configured AAA authorization in the my firewall but it works only for local username/password. PIX version 7.2(2) and ACS-SE 4.1.Following are the steps I did.1. Configure AAA on PIX (attached)2. Add PIX as AAA Client in ACS and selected as TACACS ...

we have done a gre encrypted tunnel between 2 sites (2x3800 router). everything was ok but not with a certain application which need to authenticate to the other site.anyone could figure out what went wrong or what could be there in that particular a...

we have a ACS 4.1 install with 5 acs servers, 25 remote switches and over 800 xp users all doing certificate based machine authentication that work perfectly fine. We are also using a guest vlan in our sites to auth fail a guest user onto the guest v...

Friday I upgraded my CiscoSecure ACS from version 3.3 to 4.1. Upgrade seemed to go fine. Today I come in to find out that no one is getting authenticated. I have APs in WLSE configed with WDS that are not authenticating. I also have AP's not in WLSE ...

Hi,Currently my ACS is being integrated with AD and all the users can access my IOS devices (configured AAA). I only need one group in my AD to access my IOS devices and another group to use VPN access or any other authentications.Can anyone tell me ...

Hi,I would like to know what are the configurations required in Cisco ACS for authorization.I have done the foll configurations in the switch.aaa authorization config-commandsaaa authorization exec default group tacacs+ localradius-server host 10.240...

Dear SirI have an ACS and I have many switches in the network. I used to secure the telnet andenable access to these switches with tacacas+ authentication protocol. so the username andpassword is taken form the ACS internal database. Also the enable ...

Hi,Please can someone tell me how to bypass the boot password which the appliance ask for when the appliance is rebooted.Thanks.

I have routers configured with 2 bvi interfaces for dlsw.When I configure NAS setting with 2 ip address, sometime the AAA authentication failed to prompt for user authentication.Should I used ip tacacs source-interface?If I configure only one, if tha...

I am not able to authenticate the host connecting to the AP whcih is getting authenticating aganst RADIUS. Looks like shared secret key issue. Can any one help out? Log message says,(%DOT11-7-AUTH_FAILED: Station 0013.02c4.02d7 Authentication failed

Hi everyone!I want to authenticate to my Switch via Tacacs+. It runs fine as long as I define Users and passwords in the /etc/tac-plus/tacacs.conf. But when I try to authenticate against a MySQL DB or the /etc/passwd file, authentication fails.With t...

I have configured AP 1131 as a AAA client in Cisco ACS, and one user is associated to that AP, but ACS' "Logged in Users" is not showing any user though I am getting authenticated via PEAP.

I have an ASA, an ACS appliance, Active Directory, and RSA securID. SSL users should only authenticate with AD, while IPSec users should only authenticate with RSA. Not yet using anyconnect.here is my scenario:ACS -- AD - Dynamic users are created in...

We are running ACS 4.1.(4) Build 13 on a member server within a 2003 AD Domain.We get the following errors in the CSAuth.log file:AUTH 05/03/2008 17:21:15 E 0384 6180 0x24 External DB [NTAuthenDLL.dll]: NetUserGetLocalGroups failed with result [5]AUT...