Network Access Control

We recently upgraded our ACS SE 1112 to a SE 1113 model. The trade allows us to keep the old hardware. I want to use it for a test Windows or Linux server, however I can't seem to be able to break out of the locked-down Windows boot sequence. Occasio...

hi, my query is simple, i am using acs 3.3 for windows, on cli we can change the statment of username prompt like username: to enter ur username:but when i have enabled AAA, how can i do it on acs so that username prompt contains what i have mentione...

I want to use ACS for managing the VPNconcentrator 3005. Right now I can https://VPNc_ip_address into the concentrator using accounts I created onthe ACS. I want to configure the vpn3kto fall back to local authentication ifthe ACS become unreachable....

Hi Friends,We are using Cisco Secure ACS v3.2 to manage our TACACS. I have been assigned a task to change the TACACS key of a group which has 400+ devices. I am not sure if there is any way in which i can change the TACACS key at once instead of doin...

Hi List, Currently, I have a problem with some PPPoE accounts. I configured a Cisco3640 as NAS, and ACS as AAA for PPPoE users authentication. The users that use only one VLAN working fine. However, I have users that uses the same VLAN (different acc...

Hi,I enabled Local Certificate Authority Services on ASA5500 V8.02, VPN is working when I use Pre-share key to authenticate client logon. but it doesn't work when I use the Certificate. The following is ASA 5500 debug log, VPN client log and ASA 5500...

where can i download security software i can use for my network? (e.g. tacacs+, ACS, etc.) thanks..

Hi,I want to authenticate my pppoe clients using a radius server. PPPOE client sending a username and password as well as a Service Name (which is detected in Router debug as Service Tag <service name>. I want to send this Service Name (Service Tag) ...

I am using an Asa 5520 for remote access VPN. We currently use local groups for authenticating users but i would like to use nt domain authentication. I have tested using nt domain authentication using one of our domain controllers but how do i contr...

I am trying to create AAA policy that will authenticate users via IAS but fallback to local DB if network is not available. I have successfully configured IAS to properly authenticate vty and console users but I get "access-denied" when using the sin...

Hi ThereIs it possible to "link" a SSID to a User Group in ACS 3.3 ?If there are 10 User Groups (Active Directory) in ACS and there are 4 SSID's, how can you prevent "Guest Users" from User Group 100 to connect to a non-Guest user SSID ? The Guest Us...

Hi Alluser1 >>>GroupA & user2 >>>GroupBRouter1 >>>NDG-A & Router2 >>>NDG-BNow, GroupA user must have "sh run" permission on NDG-A but not on NDG-B.GroupB user must have "sh run" permission on NDG-B but not on NDG-A.I created two shell command authori...

I would like to log the IP address of a wired client after a successfull login. I configured this on the 3750 switch:aaa accounting dot1x default start-stop group radius What else do I need ? In the ACS I can see a lot of details (client MAC address)...

Is there a way to map the authentication of an SSL VPN group on an ASA to a specific Group on an ACS server. I am trying to set up my SSL VPN groups to give a different SSL VPN access to different groups of users, but authenticate them all using the ...

Hello,I'm in trouble with this infrastructure:-ACS 4.1-Aironet 1231-PC con ADU-external user database Novell NDSAt the start, I try to use windows external database and EAP-FAST authentication with success, but, when I put only LDAP as external user ...