Network Access Control

My configuration is as follows:2 ACS servers which authenticate through a 2003 DC. Everything seems to be working fine, but every once in a while the authentication service fails to authenticate users.It says:External DB [NTAuthenDLL.dll]: MprAdminUs...

When I try to authenticate (by SSL/HTTPS) to my ACS v4.0 SE with IE6.0 browser, I get a HTTP 500 internal server error. I already tried to restart all services, reboot the ACS appliance and delete and reimport my certificates. What can I do more? I n...

I am trying to follow the "Implementing Network Admission Control Phase One Configuration and Deployment" guide version 1.1 for ACS 4.I get to the point of configuring the "External User Database Configuration" in ACS but there is no link to click to...

I have several Aironet 1100 AP's which are configure to use EAP/TLS to authenticate against a Cisco ACS server. We are using Aironet 350 pcmcia cards. This setup had been working up until friday when we moved the ACS server to a new IP address. Since...

I am using an aysnchronous interface on a router for dialup connections. I am using CSACS RADIUS for user authentication and authorization. I have also configured downloadable IP ACL's on the CSACS server. A packet capture shows that the ACS serve...

Hi all,I currently have in place wired Dot1x on an IOS switch. I have the following method list configured.AAA new-modelAAA group server radius radserv Server XX.XX.XX.XXAAA authentication dot1x default group radserv noneAs I understand it, this con...

Hi, I know in the ACSE one can limit the number of simultaneous sessions for a given user; but is there a maximum number of sessions any one user can have open if they aren't specifically limited? (i.e. - Is there anything to prevent one user from ha...

I need the equivalent command for configuring AAA on a CATOS

Hi,I have an existing ACS SE 1111 running 3.2(1) software and I just received a replacement appliance 1112 running version 4.x ACS software. I can't seem to find any information about upgrading from the older appliance to the new appliance. Is there ...

How do I configure the same user account coming in from different NGD to authenticate against different external DBs. I.E user coming in from VPN 3080 against OTP Server and same user coming in from WEBPortal against LDAP.

Hi,I have a ACS 3.3 Server set up to authenticate externally via an LDAP Server. When authenticating my VPN users it works well as im using the Cisco VPN 3000 Radius Option. When authenticating Tacacs users it works well.However when attempting to au...

I have two crypto map, one dynamic for my vpn clients and another for vpn site-to-site. The thing is that the vpn site-to-site works perfect until I put authentication for the dynamic vpn. After that, my vpn clients authenticate perfect but my vpn si...

I have configured Aironet1200 to work on PEAP mode and windows xp client to authentication using PEAP ms-chapv2. And the Windows xp user has been added to the user database of ACS. Then I tried to connect the Windows XP computer to the wireless netwo...

We are in the process of setting up a wireless network using ACS 3.3(1) and Cisco 1200 Access Points. The access points have several SSID’s configured, each on it’s on VLAN. Two of the SSID’s are used by XP SP2 clients to logon to a Windows 2003 Acti...