Network Access Control

I have setup TACACS authentication on a PIX running 6.3(3). I can authenticate using TACACS just fine, but do not get put directly into enable mode. The ACS server is setup to do so, it works for routers and switches, but not the PIX box. If I put th...

I'm using ACS 4.0 for Windows.How can I increase the validity of a self signed certificate from one year to more years?Thanks.Andrea.

I'm trying to upgrade from ACS 3.3.3 to ACS 4.1. The installer comes to 99%, and then aborts. Event viewer reports on some Dr.Watson error, application error in _INS5576._MP. Any ideas? I'm running on a VMWare server with 1 GB RAM, lots of disk. OS: ...

Hello,I'm currently working on a test with Cisco NAC and wired 802.1x.I am using the Cisco ACS 4.1 server (on a Windows Server 2003 OS). The server and the clients are connected on two Catalyst 2950 switches. The two clients (one Win XP SP2 and one W...

What effect does this error msg have on ACS >> Service CSAuth has been suspended for a configured function to proceed. Monitoring will suspend until the service is restarted <<...logs show this is constant and ongoing. ACS is up and all services are ...

Hi,I used Peap with WIN/XP with only machine authentication, sometimes I get following Message in the failed attempts log. "External DB user invalid or bad password"

Hello. I have a critical situation. We use PEAP/MSCHAPv2 for client and user authentication. Wireless users and clients will be authenticated by the ACS by asking a ADS usergroup membership. Valid users and clients have access to LAN ressources prote...

Hi all, I have a very large wired-only Ethernet network which I would like to migrate to 802.1x for stronger authentication of end users. The problem I have is that there are long chains of legacy switches which do not support 802.1x (the topology of...

Im trying to use PEAP machine authentication from a winxpSP2 client to ACS 4.0 using WIRED 802.1x.PEAP user authentication works just fine, the LAN connection comes up fine and i enter the user credentials and the connection comes up. However, when...

We have a pair of 5520's and have just enabled the webvpn. What we would like to do is use radius (Class attribute OU=groupname) to lock a user to their vpn group when one connects and successfully authenticates with the webvpn. We currently authen...

Hi There,Can ACS be considered an identity management solution (i.e. granting users different access privileges for different types of protocols). I am aware that you can push downloadable ACL but is it only restricted to HTTP, Telnet and FTP or to a...

Hello, I would like to know if it is possible to configure AAA group server radius in the platform CatOS (release cat4000.4-5.9.bin). I've read the sw features and I think that is no way.Thanks Javier

Hello, I am trying to setup an unsecured internet access using PIX and ACS 4.1 to authenticate users before access is allowed. The question is, I can only get a user and password prompt if the url is to Cisco.com. I would like to change this to eit...

I am a ACS server for authentication/authorization of client's, routers/switches/users. This same ACS server I am also using for authorizing the router to use certificates (av-pair cert-application=all). For this to work you need to create a user (FQ...

i need to assign static ip per user using acs for windows. my pc have already authenticated, but still can not get the ip static from acs server.any idea about this condition?