Network Access Control

Hi Alluser1 >>>GroupA & user2 >>>GroupBRouter1 >>>NDG-A & Router2 >>>NDG-BNow, GroupA user must have "sh run" permission on NDG-A but not on NDG-B.GroupB user must have "sh run" permission on NDG-B but not on NDG-A.I created two shell command authori...

I would like to log the IP address of a wired client after a successfull login. I configured this on the 3750 switch:aaa accounting dot1x default start-stop group radius What else do I need ? In the ACS I can see a lot of details (client MAC address)...

Is there a way to map the authentication of an SSL VPN group on an ASA to a specific Group on an ACS server. I am trying to set up my SSL VPN groups to give a different SSL VPN access to different groups of users, but authenticate them all using the ...

Hello,I'm in trouble with this infrastructure:-ACS 4.1-Aironet 1231-PC con ADU-external user database Novell NDSAt the start, I try to use windows external database and EAP-FAST authentication with success, but, when I put only LDAP as external user ...

Is it possible to replicate between ACS V4.0 and ACS v4.1?

I have backuped database in ACS SE 4.1 but it's erro "Backup failed due to FTP error. The Server returned 550 C:\Documents and Settings\ducnv\Desktop : No such file or directory"have you got any erro same it?? if had, please help??thanksducnv

When trying to upgrade 3.3 to 4.1 I get the following error message:ODBC Operation faild with the following information: Message=[Sybase][ODBC Driver][Adaptive Server Anywhere]Datatbase page size too big, SqlState=8004, NativeError=-97Thanks

When my remote site customer adds a new device to an existing client group with a large number of devices, RADIUS authentication to that device fails; authentication is successful if moving that device to a smaller client group. Is there a limit in t...

Hi,We have one issue of ACS appliance IP address has been translated to a different IP on different segment through the firewall ASA and PIX and associated AAA client Cat2960 (IOS 12.2) on the ACS with translated IP for TACACS+ server configured with...

Hi, We want to integrate the WLC with ACS 4.1 using EAP FAST authentication. As of now, it is working fine with ACS 3.3. WLC side, I have configured the new Radius server & pointed it in WLAN IDIn ACS 4.1, I have configured as per the below doc.http:...

Hi there!We are using VPN 3030 Concentrator(vpn3000-4.7.2.L-k9.bin)and can't find where to enable and turn radius accounting update option? (like aaa accounting update periodic command in "common" IOS)Could someone help me?Thanks a lot!

I've got a vpn client authentication working with an ASA running version 8.03 to an MS 2003 IAS server using the following link. http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtmlHowever with this c...

HiI am having problems making ACS 4.1 record user command information to the tacacs+ log file. I have set both the cmd and cmd-arg fields for the log but all I get is this:Date Time User-Name Group-Name Caller-Id Acct-Flags elapsed_time service task_...

Hi Sir,I have the following AAA accounting commands on an IOS device:aaa accounting exec default start-stop group tacacs+aaa accounting commands 15 default start-stop group tacacs+aaa accounting network default start-stop group tacacs+aaa accounting ...