Network Access Control

AS5350 with IOS 12.4(7)(c5350-jk9s-mz.124-7.bin)Is working as a PPtP terminator.I am trying to get the radius attribute 31 from dial-in router.I strongly need attribute "31" which should be as MAC address of pptp client.It does not appear even in deb...

I have a problem configuring Generic LDAP against my Netware Ldapserver. As far as I can see, the log files reports only "Externel user not found"Is there a logfile with more details about the LDAP request ?RegardsJohann Folkestad

Hello,I have a simple config on my router:aaa authentication login default group radius localaaa authorization exec default group radiusMy ACS user account is a member of an unmodified group on the ACS server. I have not set a privilege level in the ...

Hello,I am looking for a way to generate an SMTP message in response to a failed login attempt (admin interface access or failed user login attempt). Any suggestion on how I might make this happen is appreciated.Thanks.

Hi,This is simple! I'm missing something. Multiple 2651 routers with Tacacs authentication and authorization configured using 'default' list. thats fine, but want to add accounting.Add the lines:aaa accounting exec default start-stop group tacacsaaa ...

Hi,I would like to configure accounting on PIX devices version 6.3(5)and up. I only need to capture device administration commands for the boxes. The firewalls are setup with aaa authentication and SSH. I did not see SSH as an option for protocols to...

Hi All,We are running ACS Version 4.0 and currently use the Tunnel-Private-Group-Id function with our wireless network using 802.1x.Now we are exploring the possibility of using dot1x with Wired users but have the problem of if we do try to authentic...

Do the AAA clients in a network device group need to use the same key as the one defined in the actual device group itself, or is it separate? I'm confused between the two as with each client,you give it a key. Just wondering if that needs to match t...

There is a bug to this problem (CSCsd52574) but I need to update my ACS to the 4.1 verion before use the patch?

Anyone using certs for 2-factor auth? How did you set it up?

Hi to everyone!My problem is as follow. I have a pare of PIX 515 firewalls (active/standby) I have also one more unit with failover-only license. I tried to exemine this unit to work it as an standby unit instead of the previous one. After configurat...

Hi,I use ACS 4.0 and have used the Supplementary User Info fields on users accounts to create a Staff Number field under each uers account. I have a requirement to extract this from the ACS internal database but the csutil.exe doesn't seem to do this...

I have two 6509 switches that were in TACACS as router and switches (duplicate entries).I removed all entries and re-entered to change the naming convention.I used the same parameters, but just used a different name for the switches.Now I get failed ...

I'm Having problems with RA vpn users authenticating with Vasco tokens on my new ASA 5510 platform. I,m migrating from PIX 6.3.4 to the ASA. In my PIX configuration I used the command: crypto map outside_map client token authentication ABCXYZ to let ...

Hi all,Actually I am using Windows for user login authentication and ACS would accept TACACS and relay the authentication to Windows.Can I restrict the read-only access to PIX/ASA by ACS?Is it possible to restrict a particular user account to have re...