Network Access Control

We faced the following problem when we configured both vendor-tag circuit-id service and radius-server attribute nas-port format d command in our 7200VXR.When finishing configuration we did a debug radius and received the "AAA Unsupported Attr: circu...

Hi,We use mac-address-table static h.h.h vlan <1-4096> drop to block mac address in certain VLAN in IOS Version 12.2(18)SXF7.. That's working great. New employee comes, we want new guy to be able to show the mac-address-table static and no mac-addres...

We have a VPN concentrator, how can I stop users using local accounts and use their Windows Active Directory user accounts?

have CIsco ASA 5510 that I used for VPN access. I have it setup to Authenticate against AD for username and password. That all works fine, the problem is if a user enters an incorrcet password in VPN logon, it appears the ASA will try repeatly to aut...

Hi,I have configured ASA for Cisco VPN client with RADIUS authentication using Windows 2003 IAS.All seems to be working I get connected and authenticated. However even I use user name and password from Active Directory when connecting with Cisco VPN ...

First time when I boot the ACS 1113 and access through serial port , whenever i put login promp Administratornot getting any password promt for last 40 mnt only cusor blinking.Try to recover through CD that also not performing for last two hrs.Kindly...

Hi, We were configuring the AAA to use one of the TACACS server for authentication,authorization and accounting purpose. When we did the same, the command executed response become slow and even some times gives a message authorization failed. We thou...

Hi Guys,its like I want to have only single user ID (Could be AD account or ACS local account) & want this user account should have level 1 access on some switches,routers & have rights to run specific commands on Core devices,firewall & should have ...

Hi,I'm trying to configure kerberos authentication for local users on Cisco. KDC is running under Windows 2003, but I got folowing error from debugging:AAA/BIND(000002D4): Bind i/fAAA/AUTHEN/LOGIN (000002D4): Pick method list 'default'Kerberos: All d...

Hi,i am just wondering that a network device is sending his requests to the acs appliance with another ip than the configured ip that is configured with the "ip tacacs source-interface" command.The problem occured first when i was searching a network...

Hi,I have a problem with ACS 3.2 and its CSAuth eating memory. There was a bug in the previous versions with the memory leak and according to the release notes the 3.2(1.20) should be free from it but seems like it is still there: in 12 hours of bein...

Hi List, we've adquired a new ACS v4.1 Solution Engine, before we used UCP, with ACS 3.2 Windows based. Can I enable UCP over ACS Solution Engine? is it possible? or maybe I have to use a diferent server...Thanks...!Omar