Network Access Control

I have ACS SE v4.0.1 Build 44. I'm using the remote agent to authenticate users against AD. I have a test laptop connecting to a 6500 running CatOS 8.4.5.I can get the laptop to authenticate sometimes but it's intermittent. I can't find a pattern ...

Hi, Does anyone use 802.1x in combination with NAC framework and see 'invalid protocol data' messages in ACS (4.01)?We see this appear when we run it in parallel, when we deactivate the NAC policy in ACS or shut down the CTA services om the client PC...

Good Afternoon,I have a pair of ACS 4.0 Solution Engines that use TACACS+ for AAA with network equipment and authenticate wireless users to AD with the remote agents via Radius. I have a VPN 3030 that currently talks to a separate ACS running 3.3 whi...

Hi,When this feature is enabled, the switch checks the status of the configured RADIUS servers whenever the switch tries to authenticate a host connected to a critical port. If a server is available, the switch can authenticate the host. However, if ...

Laptop - Compaq 2006AMD Sempron ProcessorWindows XP Home Edition SP2Cisco VPN Client 4.8.01.0300VPN starts fine...CONNECTS to work server fine...BUT...crashes XP (Blue Screen of Death) after AUTHENTICATION STEP (after I enter the USER-NAME/PASSWORD a...

I have couple of questions:1. Does anyone know if Cisco supports Cisco Secure ACS software 4.0 on non-cisco hardware (I would like to install it on WMware)?2. When password rotation is configured on ACS, is it possible to use ssh to change it? When I...

Can a single ACS server be used for both TACACS and RADIUS authentication for a single device? For example on an access point I have TACACS pointed to a production 3.3 ACS server for admin authentication and RADIUS pointed to a lab 4.0 ACS server for...

I have an IOS config/Secure ACS server question. If I want local users set up on a switch to log in and go straight to the Enable prompt (Privilege level 15), and have 2 different groups of users authenticated through Secure ACS to a Windows databas...

I am looking for help to figure out how to make shared login/pword to work only on specific laptops.. I am using ACS and AD.

We are migrating from CS Unix 2.3.6 to Windows ACS 3.3.1. We want to have an autocmd (menu-select) on our just our access servers, while having a shell w/ no autocmd for the rest of the devices. On CS Unix we are handling this with 2 shells for the...

I need information for adding the atribute #26 in the radius atributes in the ACS. I am interested in filter inacl# outacl@

Hi,i have big problems with using my PIX515 (SW 7.2.1) for L2TP/IPSec VPN-Connections using EAP-TLS. With the option EAP-Proxy activated on PIX a RADIUS Access-Request Message reaches the configured RADIUS-SERVER (IAS2003), but the request is rejecte...

On a temp basis I've created a LOCAL username database on the ASA to authenticate inbound VPN client connections - this works fine. However, I notice that these same username/passwords can be used to login to the ASA - not what I desire. How do I c...

Hi ,I am in the process of setting up cisco routers/swithces to authenticate to an RSA/ACE radius server. Basically I would like it to work as follows.SSH/Telnet to router switch.I have ace side configured. I have added the necessary users to authent...