Network Access Control

HiI'm trying to set up Machine Access Restriction.I configured the ACS to allow PEAP Machine Authentication.Machine Access Restriction is also set to use de <No Access> group in case one of the authentication methodes are not ok.When computer (member...

Is it possible to configure switches to allow telnet when AAA servers are down? I can get into switches via console cable with both servers down since the switch will failover to the enable password. Is it possible to have telnet sessions failover as...

Hello all,I am using ACS 4.1 for MAC based authentication as to whether or not to allow a device on the network. It is working fine for most devies but for some of the Windows XP computers I have to disable IEEE authentication on the NIC and create a...

Hello,What is the easiest way to deny telnet and ssh (management CLI access) to the network devices which are registered in ACS based on group levels. (excpet ACL).So access should be granted for Admin groups for all others not permitted. Other group...

Hi,Whenever we try to connect ACS with Windows AD as external database we get an error.Please help us in making this point correct.The screen shot is also attached.

I have configured aaa on two routers. When I telnet into them, one works fine with the ACS server. The other router returns a password prompt (enable secret). Both configs appear to have same aaa code. Is this an aaa issue?

Hi!I'm using PEAP authentication with the Active Directory. I have Cisco Secure ACS 4 and Cisco Aironet 1230 APs. The users use their Windows account to log in, but when I change the password in the AD the password doesnt change in the Secure. Anybod...

I have configured aaa command "aaa authentication login default group radius none" to cisco switch. If i shutdown windows IAS server where i have configure client(cisco switch) i can get in to switch because of that "none" condition. But if our IAS s...

Hi,I searched a bit in this forum but I couldn't find a related topic. So here is my problem.We are trying to deploy a small NAC lab environment. We use NAC Appliance v4.1.Now the problem is, that I like to set the values for PEAP and EAP-TLS in the ...

Can someone tell me what syntax I must use to successfully create a RADIUS Proxy prefix ?I have got my own domain (mychild.mydomain.local).All non-local users must be forwarded to another RADIUS server on the internet.In ACS 3.3.3 I created a charact...

I have several ACS 4.0 servers which are authenticating wireless users with PEAP and machine accounts. Everything works fine except that about once every few weeks we have to restart the remote agent on the domain controllers - not at the same time. ...

I've successfully configured both a test switch (Catalyst 3560) and Windows Server 2003 IAS to allow RADIUS authentication on the switch. The problem I'm having is that the switch will apparently allow anyone who can authenticate through IAS to acces...

hi,I have installed ACS 4.1 and is using a 3560 Switch,the only configuration on ACS is the "AAA Client" which is my Switch host name and its ip address. and the secrect key is the same as the AAA server sercet key.the comunication betweent he server...