Network Access Control

Hello,What is the easiest way to deny telnet and ssh (management CLI access) to the network devices which are registered in ACS based on group levels. (excpet ACL).So access should be granted for Admin groups for all others not permitted. Other group...

Hi,Whenever we try to connect ACS with Windows AD as external database we get an error.Please help us in making this point correct.The screen shot is also attached.

I have configured aaa on two routers. When I telnet into them, one works fine with the ACS server. The other router returns a password prompt (enable secret). Both configs appear to have same aaa code. Is this an aaa issue?

Hi!I'm using PEAP authentication with the Active Directory. I have Cisco Secure ACS 4 and Cisco Aironet 1230 APs. The users use their Windows account to log in, but when I change the password in the AD the password doesnt change in the Secure. Anybod...

I have configured aaa command "aaa authentication login default group radius none" to cisco switch. If i shutdown windows IAS server where i have configure client(cisco switch) i can get in to switch because of that "none" condition. But if our IAS s...

Hi,I searched a bit in this forum but I couldn't find a related topic. So here is my problem.We are trying to deploy a small NAC lab environment. We use NAC Appliance v4.1.Now the problem is, that I like to set the values for PEAP and EAP-TLS in the ...

Can someone tell me what syntax I must use to successfully create a RADIUS Proxy prefix ?I have got my own domain (mychild.mydomain.local).All non-local users must be forwarded to another RADIUS server on the internet.In ACS 3.3.3 I created a charact...

I have several ACS 4.0 servers which are authenticating wireless users with PEAP and machine accounts. Everything works fine except that about once every few weeks we have to restart the remote agent on the domain controllers - not at the same time. ...

I've successfully configured both a test switch (Catalyst 3560) and Windows Server 2003 IAS to allow RADIUS authentication on the switch. The problem I'm having is that the switch will apparently allow anyone who can authenticate through IAS to acces...

hi,I have installed ACS 4.1 and is using a 3560 Switch,the only configuration on ACS is the "AAA Client" which is my Switch host name and its ip address. and the secrect key is the same as the AAA server sercet key.the comunication betweent he server...

Is it possible to clear the logs (Failed attempts, RADIUS Accounting, ...) on an ACS Appliancen v. 3.3.4 ?

I can get a csv file created for a TACACS+ Administration log/report [configured in Interface Logging of the ACS] but that log file is is empty. Help states that aaa accounting commands start-stop TACACS+ must appear in the access server or router co...

1. I've successfully got a Win2003 AD user to authenticate to the ASA via an ACS but the default group settings the dynamic user becomes part of don't get transfered to the user. How do I get the user to adopt the group settings?2. ASDM recommends na...