Network Access Control

Hi,I have made a shared RAC where I defined the following RADIUS attributes:Tunnel-type: VLANTunnel-medium-type: 802Tunnel-Private-Group-ID: QuarantineVLANSo with this RAC I want to chance the VLAN from a user that is Quarantined.So in the NAP (Netwo...

is there anyway I can use a RADIUS server without enabling/using AAA.is there any command "ip auth radius ... " ?cudnt find anything on cisco as such.

HiI have a ACS 1113, it is running the following software:Cisco Secure ACS: 4.0.1.44Applicance Management Software: 4.0.1.44Applicance Base Image: 4.0.1.2CSA Build 4.0.1.543.2: (Patch: 4_0_1_543)What I was wondering what is the latest version/patch. ...

We're using CS ACS 3.3. We've been asked to change all of the TACACS+ keys for all of our switches (approximately 900+ devices).We can use CiscoWorks to change the keys on all of the devices, but is there any way to mass-change the TACACS+ key in the...

Is anyone using L2TP for remote access connections to an ASA 5510? If so, what PPP authentication protocol are you using? Cisco TAC assisted in configuring the L2TP remote access on the ASA, and configured it with PAP saying that was the only protoco...

I have recently installed an ACS server and deployed all of our routers and switches on to it. I am in the process of trying to get a few PIXs to authenticate to the ACS, but have run into a problem.What I'd like to do is have the PIX authenticate ag...

Can someone tell me where to find a pinout diagram of the Cisco Secure ACS solution engine 1111, 1112, or 1113. I want to develop a solution to connect to the console remotely. If there is another known solution that would be appreciated too.

Hello,it?s possible to migrate my users and groups from 3.3.3 to another server 4.0?Replication and csutil doesnt work because incompatible db versions.regardsRonny Krumpe

Hi all,I am unable to get ip http server to authenticate against tacacs. attached is the debug output when logging in with the user "mark". Router config: aaa new-modelaaa authentication login default group tacacs+ local enableaaa authentication logi...

I'm using ACS 4.0. Can we export AAA clients using cli? How to access the database server directly?

How would I configure TACACS to allow a user to only access certain devices?I have a user I would like to only grant access to Switches A,B,C NO other devices. How would I configure this user on the TACACS server? Is it even possible? Thanks!

Have a couple of switches setup for AAA/Radius (Microsoft IAS running Radius). All authentication fails when I configure it with a radius key (matching on switch and server). When I remove the key, I still cant authenticate with my domain credentials...

HelloWe have this scenario:A user at home connects via SSL VPN is authenticated by Cisco ACS/RADIUS. User ends up in a specifig SSL VPN group on the ACS. This group is configured with specific properties for SSL VPN.Now the same user comes to work wi...