Network Access Control

Im configuring Agentless Authentication based om MAC addresses sent from the access switch using MAB (MAC Authent. Bypass). I got it up and running, but with just one MAC address configured in the Authentication rule. When I try to configure more tha...

hi,I have an ACS and two switches. they are configured for 802.1x. 2950 works fine but 2960 does not work. I see an error message "Invalid message authenticator in EAP request"what does this mean? They have the same configuration. thx

Can i free download CSACS v3.3 for PC from Cisco web? But how?

Hi,I have ACS 3.3 installed on Windows 2003 server with latest service packs. Users who wish to login to network devices has to be authenticated via windows credentials. So i have integrated ACS with Microsoft. I need to create another group, but its...

how AS5400 can be configured in a way to send Voice authorization requests to radius server?ihave only these commands:aaa authentication ppp h323 group radiusaaa authorization network h323 group radiusaaa accounting network h323 start-stop group radi...

What algorithm and key strenght is used when I check the Encrypt Backup File option in ACS:Solutions Engine?

Hi,I have a project in hand to implement 802.1x for wired networks. Whenever a PC gets connected to the LAN switch, it should get authenticated at Layer 2 and then it should be authorised to access LAN. The components involved in this project will be...

Good day, I'm trying to setup replication between a Windows ACS and an appliance ACS. The Windows ACS will be the master so the applianance will the be secondary.I have setup the replication partners, I have verified the shared secretes, I have moved...

I have a PIX running 6.3(5) and ACS 3.3 and I'm trying to configure AAA Authorization on the PIX. I followed the docs on Cisco, however I can't get anything to work. AAA authentication is already working so I know that end is OK. What I want ot do is...

Dear All,Please find below the debug output of my switch:02:31:31: AAA: parse name=FastEthernet0/31 idb type=122 tty=-102:31:31: AAA: name=FastEthernet0/31 flags=0x15 type=6 shelf=0 slot=0 adapterport=31 channel=002:31:31: AAA: parse name=<no string>...

When ACS communicates with another authentication server (eg: ACE), does it include the NAS or the user's address in the ip packet payload? The reason for this question is that we want to use NAT between ACS and ACE. Obviously the NAT won't work if t...