Network Access Control

Can I configure an ACS to limit the commands available to Telnet sessions without affecting console commands. I.E. I want to stop commands such as WRI ERASE from being run from Telnet

HiI try to implement "Downloadable IP ACL" between 3560 (IOS 12.2(35)SE1) and An ACS Appliance 4.1.3.12 using Radius authentication of a user that want to connect on the switch.The authentication works fine and I can log to the switch without problem...

A customer has an ACS 4.0.27 for Windows 2k3 SP2 and added a new domain. By mapping the domain with a group of Cisco Secure should authenticate with the user of that domain and access devices group Cisco Secure, but always authentic in the group ID 0...

Hello!I have a problem with 802.1x (PEAP) authentication for wired clients. If the option "Log On To" in AD is enabled, authentication failed. Without this option everything works fine.I suspect that I'm missing something in ACS configuration which u...

I have an RSA v6.1 server running SecurID and Steel Belted RADIUS. This is performing authentication requests, via RADIUS, to a Cisco router at an ISP which hosts a PPP dial in service over PSTN.Currently I can dial successfully into the system using...

Hi I'm hoping I've missed something basic here. I have an ASA5520 (V7.0(7)) I have enabled (I think) enable authentication with the following command:aaa authentication enable console tacacs LOCALI can authentication to CLI ok with my ACS username/pa...

Thanks

The goal....1. local usernames on a router to control access2. Use privilege levels in the username command to reflect what a user is allowed to do3. Define a set of commands available to users with privilege level 1My trouble here is that I cannot s...

Hi,I am trying to configure local authorization on a router on the console access for a user with privilege 5 (the username is "test").I have privileged some commands under level 5, however the authorization is not taking place and when the user logs...

Dear SirI want to know there is any possibility which we have ability to see the client IP address on the report activity because already I can see the MAC address of the client but I want to see the IP address of the client I would be happy if you l...

Hi, I have a Cisco Concentrator. Users using their Cisco VPN client authenticate using RADIUS (Active Directory) which just a windows IAS server.I eventually want to move the Client VPN's over to the ASA's but I can't find where to add the authentica...

Hi there.I have a 2611 router, IOS version 12.3(25), configured as an VPN server. I have already configured the IP Sec parameters, users...and it is all working fine. But my customer needs to limit the access of one user that uses the same group and ...

I am setting up a 2801 router for Cisco clients to connect to and working on getting it to work with IAS server. I've been looking at lots of configuration examples and see that I can do isakmp authorization to Radius but can't get it to work. I have...