Network Access Control

Has anyone managed to authenticate with certificates to ASA for WebVPN ?I configuredtunnel-group DefaultWEBVPNGroup webvpn-attributes authentication certificatebut still getting the error messageGroup <DefaultWEBVPNgroup> User <...> IP <...> Authenti...

01:19:44: TAC+: Invalid AUTHEN/START/LOGIN/ASCII packet (check keys).01:19:44: TAC+: Closing TCP/IP 0xAC5F14 connection to 10.52.166.119/4901:19:44: TAC+: Using default tacacs server-group "tacacs+" list.01:19:46: TAC+: Using default tacacs server-gr...

Hi Everyone,I am about to deploy TACACS+ for network authentication and accounting. Would somebody mind casting an eye over my configuration to tell me if it looks ok?I am trying to configure TACACS+ as the primary means of authentication for telnet ...

I am trying to acheive this:When users try to access the network they should get authenticated using dot1x using their Active Directory username/password. I have no issues with that.However this is my issue:What happens when users share their usernam...

Hello,Does anyone know of a way to have Cisco switches use the MAC address of devices that connect to them as a username/password combination for authentication via ACS? I want to set up the switches to query ACS as to whether or not to allow device...

We have 2 Cisco ACS appliances running version ... Cisco Secure ACS 3.2.2.5 Appliance Management Software 3.2.2.5 Appliance Base Image 3.2.2.1The fact is that after initial setup, we have never used the console mainly because in a production environm...

Has anyone seen this. I have an ACS Solution engine appliance with Several devices using it for authentication and accounting. It all seems to work great. When I add a new device (router or switch) i noticed that it will let me login via the acs base...

Hi,I have set up a 3020 concentrator (4.7) with locally created accounts. I have two problems which may be related - the 1st is that when I try to establish a session with the Cisco client(v5) the first attempt fails - logs on the VPN Conc show 'send...

Hi,I have a PIX 515E 6.3(5). Currently i am using the local PIX database to authenticate the Remote Access VPN users. I would now like to authenticate and authorize users with a AAA server. I already have FreeRADIUS installed and tested on my network...

Hello All,I want to carry out an IOS command on CatOS.IOS----------------------------------------------------!service timestamps debug datetime localtimeservice timestamps log datetime localtimelogging buffered 8192 informationallogging trap debuggin...

I'm trying to use Win2003 IAS for 802.1x authentication. But the event log of IAS keeps give me the error message"A malformed RADIUS message was received from client XXX. The data is the RADIUS message." I have checked that the radius key is correct....

I've setup VPN access that is supposed to use my Win2k domain controller for authentication. Users are able to gain access to the domain eventhough their user account has deny remote connection enabled in their account. Why does the VPN client stil...

Hi,we are considering IPSec deployment to all peers in an interprise network. What worries me in pre-shared key for peer authentication is scalability, but I do not see any way out, since all Cisco routers, I am aware of, do not maintain the clock, t...

Hi there,I configured the HTTP auth-proxy on a cisco router 2611XM (IOS 12.2 11T). The configuration is attached. Among them, 192.168.75.100 is the ACS server, 192.168.75.151 is the client machine, 192.168.75.11 is the router.The issue is when I trie...

I currently have ACS ver 3.3 and I'm wondering if I can use 3.3 to authenticate clients on my WLC. The WLC is using the latest code revision. Thanks in advance.