Network Access Control

HiI created "Shell Command Authorization Sets" under ACS 4.1.I use Radius (IETF). How do I map the "Shell Command Authorization Sets" to user groups???Thanx for helpbb

Hi,I was adding multiple AAA Clients on ACS Appliance using RDBMS Synchronization option I followed the complete steps but failed to synchronize accountActions.csv file on ACS my ftp server is working fine and returned the logs saying "accountActions...

We faced the following problem when we configured both vendor-tag circuit-id service and radius-server attribute nas-port format d command in our 7200VXR.When finishing configuration we did a debug radius and received the "AAA Unsupported Attr: circ...

Hi,We use mac-address-table static h.h.h vlan <1-4096> drop to block mac address in certain VLAN in IOS Version 12.2(18)SXF7.. That's working great. New employee comes, we want new guy to be able to show the mac-address-table static and no mac-addres...

We have a VPN concentrator, how can I stop users using local accounts and use their Windows Active Directory user accounts?

have CIsco ASA 5510 that I used for VPN access. I have it setup to Authenticate against AD for username and password. That all works fine, the problem is if a user enters an incorrcet password in VPN logon, it appears the ASA will try repeatly to aut...

Hi,I have configured ASA for Cisco VPN client with RADIUS authentication using Windows 2003 IAS.All seems to be working I get connected and authenticated. However even I use user name and password from Active Directory when connecting with Cisco VPN ...

First time when I boot the ACS 1113 and access through serial port , whenever i put login promp Administratornot getting any password promt for last 40 mnt only cusor blinking.Try to recover through CD that also not performing for last two hrs.Kindly...

Hi, We were configuring the AAA to use one of the TACACS server for authentication,authorization and accounting purpose. When we did the same, the command executed response become slow and even some times gives a message authorization failed. We th...

Hi Guys,its like I want to have only single user ID (Could be AD account or ACS local account) & want this user account should have level 1 access on some switches,routers & have rights to run specific commands on Core devices,firewall & should have ...

Hi,I'm trying to configure kerberos authentication for local users on Cisco. KDC is running under Windows 2003, but I got folowing error from debugging:AAA/BIND(000002D4): Bind i/fAAA/AUTHEN/LOGIN (000002D4): Pick method list 'default'Kerberos: All d...

Hi,i am just wondering that a network device is sending his requests to the acs appliance with another ip than the configured ip that is configured with the "ip tacacs source-interface" command.The problem occured first when i was searching a network...