Network Access Control

I am trying to implement Cisco's AuthFail VLAN functionality on a Catalyst 3560. It works fine with PEAP but does not work with SmartCard/Certificate (EAP-TLS) as the 802.1x protocol.Please note that in my scenario I expect the authentication to fail...

I have a primary ACS with IP address 10.250.97.29/24. it is working fine.Now I would like to add a secondaryACS with IP 10.250.97.50/24. BothACS 4.1 are identical with version 23 patch 5. both are running on Win2k3with Service Pack 2. Both Win2k3 are...

Hi,I need to activate a control privileges of users on various devices.I found this interesting document:http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtmland using a router with IOS 124-11.XV1 ...

HiI have Pix firewall which configure AAA to ACS. I have Also ACS 2.3 in Sun based.I create two group in ACS. in group A has user like jon, sam bin and group B has user like shn , kell. now I permit autentication user group A to firewall. from group ...

We have one ACS server on the network and we need to add a second server. The secondary server will be replicating the primary.Is it advisable to point some devices to the primary and the other half to the secondary server to balance the load? JT

i want to install the certificate in acs server, I have taken the option generate certificate signed request. configured all parameters like install ACS certificate, authority setup and trust list. the certificate has been generated and installed on ...

Hi thereI was wondering what you can do with ACS replication between primary and secondary ACS. I want to install two ACS's together with PEAP in a wireless environment. I read on the site that external user database replication is not posible. I wan...

I need advice from someone with experience with both Cisco ACS 4.1 build 25 and RSA SecurID 6.1I have a primary ACS 4.1 build 25 running on win2k3 Service Pack 2 AD controller call box_1. This machine, box_1, also has RSA SecurID Primary installed. A...

Hi,I have 2 ACS SE-appliances (1113). I'm experiencing lots of problems with the AAA-servers. After (re-)installation, I have different results: sometimes, there are 2 entries in the AAA-servers-list: an ACS01 (name of the appliance) and a "self". Bu...

Trying to replicate 2 ACS servers and I get the follwing error.ACS 'Server' has denied replication request10/30/2007 22:09:49 INFO Outbound replication cycle completed 10/30/2007 22:09:49 ERROR ACS 'Server' has denied replication request 10/30/2007 2...

I have a pix and a secure ACS. Users connect to network with VPN on pix. They authenticate with ACS. Also when we telnet or ssh to pix they also authenticate with ACS. How to seperate them ? Im using windows database.thx

I am trying to lock down my switches for my junior network engineers and have run into a problem for my sites without Radius/Tacacs.I would like to set a privilege level that only allows admins to configure interfaces, ip access list, and show comman...