Network Access Control

I am using ACS 3.2 and on the NAR section,I have used a wildcard (*) to define all the network devices on my network.All my users are in one group. However,I have just realised there is the need for me to create another group and put some users in th...

Can somebody expalain to me the question that is found in attachment, appreciate your help in advanceRegards

I am implementing a Wireless Lan solution for guest users, they are authenticated via an external Radius server. The user is abe to login in and access the resources however their session does not get time out even though I have configured Session Ti...

Hi,I have configured a PIX with the following commands:aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXaaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXXaaa authentication serial...

I want to automatically run a login script after my VPN Client has authenticated and built the tunnel. I tried using the VPN Client's Application Launcher, however that runs the application immediatly when the connection is launched and doesn't wait ...

Hi,We have a Checkpoint Firewall using ACS for authentication with RADIUS protocol. We have two ACS servers configured as primary and secondary on the Checkpoint. Both the ACS servers are configured to use AD as the external database. Checkpoint is f...

I am currently developing a Java application that interacts with the CISCO ACS for Authenticating passwords using Tacacs+. My problem is that when a user's password is about to expire the getServerMesage() function does not return any message. I look...

Hi all,We have a line unused in the aaa config:aaa authentication login default group tacacs+ localthe one used in the vty is:aaa authentication login Tacacs group tacacs+ localDoes it make sense maintain that line while is not being used? Or maybe i...

When upgrading we followed the steps outlined in the upgrade documentation and everything went fine until we did the new base image and tried to restore the 4.1.1 database. Upon restoring the database the system slowly became inoperable to the point ...

Does all IOS support the above? Do I need to look for the feature set that support it? Which version and above uses this command "crypto key pubkey-chain dss" and which version and below uses the old command "crypto public-key"

Can't find a command ref for a new Pix (vers 7.2(1)13 )) for this command >>ip tacacs source interface <<. Also, can't enter this command into the Pix.

HI, i am using the similar config in my Cisco ASA listed below in the website of the config. in that user marty is a local user name for authenticating the ASA via SSH from LAN, but user marty is also able to login VPN, how do i avoid that MARTY user...

Hi all, i was trying to authorize the asa with acs 3.2 on priv lvl 7 using tacacs+,but the users were geting priv-lvl 15 only..aaa-server aaa_serv protocol tacacs+aaa-server aaa_serv host 10.0.0.10 key cisco123aaa authentication serial console tac_se...

Since my previous question got answered quicker than it would have taken to open a TAC case I figured I would post another problem.I had an NDG created and goofing around deleted it. It had a AAA client in it and whenever I try to recreate that AAA c...