Network Access Control

Hi,We have multiple internal lans/networks sharing a common internet pipe/link terminated on a Cisco router.We have seperate NAT IPs ( Public IPs ) configured for each network to differentiate them from one another outside the firewall.My requirement...

We upgraded from ACS 3.3 to 4.0 and it broke our authentication which is pointed to our Windows DC. The failed attempts log only shows "Internal error" when trying to authenticate. Anyone experience this?

Hi.. Im trying to understan the way acs working with group maping to Active Directory.What i wan to achive is 1- to have AD group for Wireless userswho are permitet to authenticate and use WLAN 2-to have AD group for VPN users who are permitet to aut...

Has anyone have a config I could follow to set this up? Under External user Databases I don't see RSA SecurID. I have to install the RSA Authentication Agent? How would I get access to the Windows side of this ACS server if I have to do that? Any hel...

Hi,What is the procedure of replication between primary acs and secondary acs while primary acs is installed with self generated certificate for EAP-FAST and for SSL enabled interface to Primary ACSis it mandatory to generate certificate on secondary...

My org is switching from an appliance-based deployment to a Windows-based deployment (got tired of maintaining the Remote Agents separately and having no access to the system interface.) We're also installing a newer version of the software, obviousl...

I am using ACS 3.2 and on the NAR section,I have used a wildcard (*) to define all the network devices on my network.All my users are in one group. However,I have just realised there is the need for me to create another group and put some users in th...

Can somebody expalain to me the question that is found in attachment, appreciate your help in advanceRegards

I am implementing a Wireless Lan solution for guest users, they are authenticated via an external Radius server. The user is abe to login in and access the resources however their session does not get time out even though I have configured Session Ti...

Hi,I have configured a PIX with the following commands:aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXaaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXXaaa authentication serial...

I want to automatically run a login script after my VPN Client has authenticated and built the tunnel. I tried using the VPN Client's Application Launcher, however that runs the application immediatly when the connection is launched and doesn't wait ...

Hi,We have a Checkpoint Firewall using ACS for authentication with RADIUS protocol. We have two ACS servers configured as primary and secondary on the Checkpoint. Both the ACS servers are configured to use AD as the external database. Checkpoint is f...

I am currently developing a Java application that interacts with the CISCO ACS for Authenticating passwords using Tacacs+. My problem is that when a user's password is about to expire the getServerMesage() function does not return any message. I look...

Hi all,We have a line unused in the aaa config:aaa authentication login default group tacacs+ localthe one used in the vty is:aaa authentication login Tacacs group tacacs+ localDoes it make sense maintain that line while is not being used? Or maybe i...