Network Access Control

Hi,This is simple! I'm missing something. Multiple 2651 routers with Tacacs authentication and authorization configured using 'default' list. thats fine, but want to add accounting.Add the lines:aaa accounting exec default start-stop group tacacsa...

Hi,I would like to configure accounting on PIX devices version 6.3(5)and up. I only need to capture device administration commands for the boxes. The firewalls are setup with aaa authentication and SSH. I did not see SSH as an option for protocols to...

Hi All,We are running ACS Version 4.0 and currently use the Tunnel-Private-Group-Id function with our wireless network using 802.1x.Now we are exploring the possibility of using dot1x with Wired users but have the problem of if we do try to authentic...

Do the AAA clients in a network device group need to use the same key as the one defined in the actual device group itself, or is it separate? I'm confused between the two as with each client,you give it a key. Just wondering if that needs to match t...

There is a bug to this problem (CSCsd52574) but I need to update my ACS to the 4.1 verion before use the patch?

Anyone using certs for 2-factor auth? How did you set it up?

Hi to everyone!My problem is as follow. I have a pare of PIX 515 firewalls (active/standby) I have also one more unit with failover-only license. I tried to exemine this unit to work it as an standby unit instead of the previous one. After configurat...

Hi,I use ACS 4.0 and have used the Supplementary User Info fields on users accounts to create a Staff Number field under each uers account. I have a requirement to extract this from the ACS internal database but the csutil.exe doesn't seem to do this...

I have two 6509 switches that were in TACACS as router and switches (duplicate entries).I removed all entries and re-entered to change the naming convention.I used the same parameters, but just used a different name for the switches.Now I get failed ...

I'm Having problems with RA vpn users authenticating with Vasco tokens on my new ASA 5510 platform. I,m migrating from PIX 6.3.4 to the ASA. In my PIX configuration I used the command: crypto map outside_map client token authentication ABCXYZ to let ...

Hi all,Actually I am using Windows for user login authentication and ACS would accept TACACS and relay the authentication to Windows.Can I restrict the read-only access to PIX/ASA by ACS?Is it possible to restrict a particular user account to have re...

Hi all. I hope this will be an easy one for you. I currently have AAA enabled on my switches and routers. The methods list is using the TACACS+ server first, then local as the failover. What I would like the switch to do is provide an alternate l...

Hello everyone,I have a Cisco 1112 SACS device configured as Radius server, the SIP servers are added to the ACS as Radius clients for server key: ?key? under authenticate using I choose ?Radius-IETF? for both Radius clients.I setup users on the SIP ...

When looking at TACACS+ session and command accounting from various IOS devices its hard make any sense of the values you see in the task_id attribute.I always thought it was analagous to the RADIUS session-id attribute.. but when you look it isnt.So...