Network Access Control

Dear All,Please find below the debug output of my switch:02:31:31: AAA: parse name=FastEthernet0/31 idb type=122 tty=-102:31:31: AAA: name=FastEthernet0/31 flags=0x15 type=6 shelf=0 slot=0 adapterport=31 channel=002:31:31: AAA: parse name=<no string>...

When ACS communicates with another authentication server (eg: ACE), does it include the NAS or the user's address in the ip packet payload? The reason for this question is that we want to use NAT between ACS and ACE. Obviously the NAT won't work if t...

I am using a Cisco ACS server with an RSA server behind it. When the user is authenticated from the ACS server, I want them to go straight into enable mode, not have to type the enable mode password. What line am I missing?aaa authentication login ...

Hi all!I'm first do acs 4.1, i have a problem as What does acs 4.1 appliance join a domain???? I lab with acs 4.1 on window server 2003 is ok, but when work with acs 4.1 appliance, i don't know join domain for this appliance so not use window databas...

We give external students access to several academic databases through a VPN Consentrator(3000 series).Accessing some of these databases gives only blank pages using I.Explorer/Firefox.Java is installed and also the cookies settings is correct. When ...

Attempting to set up multiple group by command permissions.I have created the Shell Cmd Auth Set and assigned a group to that Set.On my switch I have following cmdsAaa new-modelAaa authentication login default group tacacs+ local Aaa authorization co...

G'day All Hope someone can answer this question for me.I am auth'ing a number of 6500's + 4500's switches to a pair of acs appliances, if I telnet or ssh to the switches, all is good and I never get requested for a password request, but if I log in v...

Has anyone ever had any trouble getting the thawte certificate website to accept an ACS Certificate Request?

dears, where or how i can get and monitor these attributes.the green one i got them but red one i did not find them....so how i can find the red one. pleases see the attached file.

I have ACS appliance where originally was setup by the vendor that used his name as the username of the administrator during the ACS setup. Right now ACS does not allow me to remove that name. I know PCI says no vendor/default usernames can be used. ...

Hello,I want to authenticate vpn client with radius, it's working with pix 6.3 but with a pix 7.0, I have some difficulties :if I test my radius connection with "test aaa-server authentication partnerauth"It's working ...INFO: Attempting Authenticati...

Hi I was hoping someone could point me in the right direction, I am having a problem configuring AnyConnect with ASA 8.02 with Mutable groups as it seems the only way to do this is during authentication, the RADIUS server can push down the webvpn:use...