Network Access Control

I had set up Cisco ACS for TACACS authentication for Cisco Aironet and Cisco ASA. Unfortunately the server crashed and i did not have backup. But i had the secret key and other server information. I re-installed the Cisco ACS and could successfully a...

I am trying to setup vpn client accessto a new Cisco ASA 5505. I can get the local authentication to work, but radius authentication will not work! Is there anything different in setting up Radius with the ASA than with a PIX?

When replicating from primary to backup, a certain number of temporary accounts are created (seen as numbers in the logs). After replication these numbers remain as logged-in users. What is happening during replication ?? Many thanks,

Hi all,how do we give only interface level config command access and show commands for usergroup.Thanks in advance.Rgds,Rajesh

Hi All,I am trying to implement 802.1x security on the network. I am tesiting on a switch on one of the ports with the following config conf taaa new-modelaaa authentication dot1x default group radius radius-server host x.x.x.x auth-port 1612 key rad...

Hello, I've not yet understood if with ACS 4.0 is possible to configure external database authentication using Generic LDAP to connect to Windows 2003 Server Active Directory.I spent more than 3 weeks searching for docs telling how to do this but not...

Hi, I have a problem with switch 2948 CatOS 6.x, i can?t enter to the device, the firts I was blocking in the router the address of tacacs server and then i used a local user but it doesn?t work.Username: tcomEnter PASSCODE:% Authentication failed.Us...

Hi,I have a probleme with a Cisco Secure ACS 4.0 Solution Engine (CSACSE-1113-K9).I try to power up the engine, but the light in the power button stay blinking all the time. Anyone have a idea why ?Last week, I boot it for the first time (It's brand ...

Hi guys,I am facing the following problem, while viewing the Windows database setting in Tacacs server. Screenshots attached for your reference.

Hi All,Just a quick note.. the auth-proxy prompt will accept html code if you want to tidy up the proxy login page a bit!Note: If you are using telnet auth too, telnet users will just see html code! - be warned ;-)You are limited to 254 chars though ...

Hello,I'm currently working on a test implementation of Cisco NAC with McAfee.Everything works, the client is put into the right VLAN, etc.But unfortunately, every few minutes (it happens in all the VLANs so it's not a specific VLAN problem or so) th...

HAs anybody successfully deployed the new syslog feature to send messages to CS-MARS? I am able to syslog to the Cisco PIX Firewall syslog server (running on a workstation), but I have not been able to see the messages appear in CS-MARS. I followed...

Hi, in the 4.1 release notes the direct upgrade from 3.3.3 to 4.1 is allowed but I have 3.3.2: have you tested it ?I don't have 3.3.3 and I'd like to avoid 4.0 upgrade.thank yours

The installation and configuration guide for the ACS remote agent says that the remote agent is able to do user group membership verification. I have spent hours trying to find out how to do this.I have an ACS remote agent running on a domain control...