Network Access Control

Do the AAA clients in a network device group need to use the same key as the one defined in the actual device group itself, or is it separate? I'm confused between the two as with each client,you give it a key. Just wondering if that needs to match t...

There is a bug to this problem (CSCsd52574) but I need to update my ACS to the 4.1 verion before use the patch?

Anyone using certs for 2-factor auth? How did you set it up?

Hi to everyone!My problem is as follow. I have a pare of PIX 515 firewalls (active/standby) I have also one more unit with failover-only license. I tried to exemine this unit to work it as an standby unit instead of the previous one. After configurat...

Hi,I use ACS 4.0 and have used the Supplementary User Info fields on users accounts to create a Staff Number field under each uers account. I have a requirement to extract this from the ACS internal database but the csutil.exe doesn't seem to do this...

I have two 6509 switches that were in TACACS as router and switches (duplicate entries).I removed all entries and re-entered to change the naming convention.I used the same parameters, but just used a different name for the switches.Now I get failed ...

I'm Having problems with RA vpn users authenticating with Vasco tokens on my new ASA 5510 platform. I,m migrating from PIX 6.3.4 to the ASA. In my PIX configuration I used the command: crypto map outside_map client token authentication ABCXYZ to let ...

Hi all,Actually I am using Windows for user login authentication and ACS would accept TACACS and relay the authentication to Windows.Can I restrict the read-only access to PIX/ASA by ACS?Is it possible to restrict a particular user account to have re...

Hi all. I hope this will be an easy one for you. I currently have AAA enabled on my switches and routers. The methods list is using the TACACS+ server first, then local as the failover. What I would like the switch to do is provide an alternate login...

Hello everyone,I have a Cisco 1112 SACS device configured as Radius server, the SIP servers are added to the ACS as Radius clients for server key: ?key? under authenticate using I choose ?Radius-IETF? for both Radius clients.I setup users on the SIP ...

When looking at TACACS+ session and command accounting from various IOS devices its hard make any sense of the values you see in the task_id attribute.I always thought it was analagous to the RADIUS session-id attribute.. but when you look it isnt.So...

Thanks to all, I appreciate your help!I have a 4006 CatOS switch running 6.3, I can telnet and authenticate via TACACS servers, how do I make sure I'm able to serial console to the switch in the event IP connectivity to the TACACS servers is lost or ...

Hi,Currently I have users authenticating against RSA Ace server, but going via ACS 4.0's external database policy. Also have dialup users authenticating against the ACS internal database with CLI restrictions. My intention is to move the users using ...

Hi,I have imaged 4.0.1.44 on an ACS solution engine and everything was going fine and I made it as a secondary ACS and managed to replicate the entire database from the primary. When I shifted the ACS from one place of the network to another (but on ...