Network Access Control

HiIve got a 3005 consentrator on my cetral site and PIX501 on my remote sites (easyvpn).On two of my remote sites I have been starting to have problems with vpn clients autentication to the remote site server (AD).Even if I test user authentication f...

I am using Microsoft IAS for my 2950's and 3550's. So far I can only get it to work using PAP. The options available are CHAP, MS-CHAP, MS-CHAP2, PEAP, and MD5. Are any of these supported by cisco because PAP is not secure.

Hi,Can anybody help in getting any web links which helps me to learn about implementing Tacacs as i am new to it.

Hi All,what I want to do is to bind a specific vpn user with a specific vpn group using a Radius server for AAA and ASA as end point of the vpn.Which is the correct AV pair to use in the communication?Is there a list of all AV pairs usable with ASA a...

Hello,I have ACS and I use this authentication center for multiple devices. My issue is to deny VPN access for some groups, and allow for other. Clients are connected to ASA, maybe the solution can be an cisco-av-pair attribute or something else.Plea...

Hi,We have two ACS servers and we plan to replicate in real time. We have these ACS servers are befind PIX firewall ( inside ) at different locations. Some how we are not able to replicate database from one server to another over real time. Final...

Hi All,Minor dilemma;We have a customer who has requested a support contract on their ACS server, but they have no idea who they bought it from and cannot find the license number nor PAK number - good eh!!Is there any location/directory on the actual...

I have installed the UCP on the Win 2003 server together with ACS 4.0. However, 'CGI Error' occured when I login the UCP.Anyone have the solution on this?ThanksErnest

Hi all,I have a issue where 802.1x is configured on a 2950 switch.The same config is applied to a 3560 (with new IOS). Both switches are created in ACS 4.x and the 2950 authenticates correctly and changes the port in with the PC is authenticated in t...

hi all,we need some help here, we have AAA server, and windows 2000 server (CA server and FTP server built inside also). when we try to import a certificate from FTP server, it cannot be done because ACS shows that it cannot connect FTP server and so...

All,Sorry if this has been done before - but has anyone got a step by step set of instructions for setting up ACS 3.3 to use ODBC logging to an MS Access database. I have been trying to get the Passed and Failed authentication logs to go to an access...

Hi!I've already asked my question, how to get directly to enable mode after log in to the FWSM via ssh in the sub forum "general", but i try it again here.I created some users with privilege level 15, that are able to log in to the FWSM via ssh. But ...

would like to know what is the best way to upgrade 3 ACS servers from 3.3 to 4.0. they are configured in 1 primary and 2 back up ACS server.regards

Hi,I am setting up a solution where I want to use rsa authentication (Ace v5.1) and the Cisco vpn client connecting to a vpn3005 concentrator. Most users on this setup should get their IP from a dhcp server on the LAN and this works fine along with r...