Network Access Control

I'm curious if anyone has tried to implement and use ACS while providing Managed IT services to multiple clients network devices in an Extranet design? I'm suggesting this to prevent having to maintain multiple accounts and passwords for each clients...

Hi allWe plan to implement 802.1X. We have several departments. Each department is using several VLANs, depending on which building the machine is.If a machine/user from department A connects in building A, it should receive VLAN 10 via 802.1X vlan a...

Just wondering if anyone knows if it's possible to have a Tacacs server supporting multiple networks through 2 different Nics. I.e., One network on a 10.0.0.0 segment, and an another on say a 192.168.0.0 Network (each attached seperately via Dual Nic...

hi there i am having 501 pix with eazy vpn enabled on it .it;s acting as a client to a ios router as a server in network-extension-mode . i want to know how to set user authentication feature along with the eazy vpn . i mean when my users try to acce...

All:I have the "Upon remote user password change, immediately propagate the change to selected replication partners" box checked on my ACS and two ACS are configured as partners. When users login for the first time, they are forced to change their pa...

Hello,how I understod the maximum of Cisco ACS v3.3 password lenght is 32 characters and for username 64 characters. Is it possible to use 128 characters for both the username and password, because some of our users use very long credentials for secu...

Hello, We are using ACS in a 802.1x enviromnent, where 802.1x clients authenticate via Cisco switches to an ACS server, and the ACS server has an external database; Windows AD. This all works fine. The only weird thing is the account caching that ACS...

I'd like to set up ACS server (integrated with Windows Active Directory) for router and switch so that all network administrator could use their active directory account to access network devices… and all activities will be logged on to ACS server. C...

I cannot seem to restrict a users' access to the monitor tab or to read-only access. I have been told it can be done. Help!PIX 7.0(2) - ASDM 5.0(2)

Hi, can anyone please tell me how to configure Cisco 2500 Switch so that it forwards the EAP requests sent by the NAD. I dont want the Cisco Switch to be the NAD but, it has to forward the Eap requests to clients.

I have NAC v1 set up on routers. Everything works OK using CTA 2. Is there anyway of speeding up the initial authentication from client to server?It seems if I attempt a layer 3 connection (causing posture validation) there is quite a delay. More ...

Hi, we have Cisco ACS 3.3, we use it to authenticate VPN users locally created in ACS and all works fine.The problems start when ACS must authenticate VPN users from an external LDAP database.When an LDAP user try to log via VPN he has: LOGIN FAILED....

Presently i ve two AS5300 access servers. on one access server modem standard set to "v.34 automode, with turbo" and on second access sever the modem standard is set to "v.90 automode". now i want to chnage the standard from "v.34 automode, with turb...

I have a PIX firewall V6.3 and a Windows 2000 IAS to authenticate VPN(Client Cisco V 4)users by a Group.The authentication works fine, but I like to use the accounting to log the user logs on and logs off. Right know it only logs when they connect, b...