Network Access Control

i am prepared to configure ACS Replication between my two SecureACS Servers vs 3.2. My question is, how am i supposed to configure both TACACS Servers in the configuration of let's say a router if the primary fails? As far as i know the IOS will acc...

Hi, I'm using catalyst 3750s and cisco acs 4.1 to authenticate clients but I need help. The docs tell how to configure basic web auth on ports but I need more details as I'm very new to this. For example, do I need an external webserver to serve the ...

Hi,I have a customer that is connected to his Lan by an APN dedicated in gprs. The NAS is a GGSN Juniper and the APN ends to the customer's router that is an Cisco 3725 and the Customer Radius server is an ACS 4.0 . the customer needs to have the Wi...

Hi I'm working with XP sp2 and ACS 3.2(3) and wireless LAN. I use PEAP-MSCAHPv2 on my client and authentication through a windows database W2003server.If I start regulary my client everything is ok, both machine and user authentication, but if for an...

I am trying to figure this out and not getting anywhere. I want to have acs use windows AD for authentication. Then I want the AD authed user to have priv-1 access. Then type 'enable' to gain enable access to the device if they have the enable pas...

I have a production ACS system that has multiple external NT domains for authenticating users.We are bringing up a new ADS domain that I need to authenticate against. We have created the trust. The domain shows up in the domain list. When I go to ...

If you were to have all network devices authenticate via tacacs to the ACS using windows AD accounts. What would happen if ACS could not reach AD for authentication, but the network devices could still access ACS? I cant seem to find this in the d...

Hello, I have Secure acs 4.0 installed with a external UDVs / VSA group for nortel device.I have a number of administrators running on my network and I want to assign a specific administrator control over a different UDV/VSA set regardless of users/g...

Hi,I have been noticing this issue on most of the devices I touch. Here is the pertinent configuration.ip ssh ver 2ip ssh source lo0ip ssh rsa key SSH-KEY!line vty 0 15trans in telnet sshexec-time 30 0If I telnet to the device, the session will time ...

My remote users connect to a vpn 3005 and are authenticted by a CSACSE 4.0. The authentication process is done but the users have no network services. Any ideas???

I upgraded the appliance from 3.3.3 to 4.0.1.42 and the services do not start. I have nothing under "TCP Ports Opened" and "UDP Ports Opened" on the Appliance Status page. How do I start the services?I have "CiscoSecure ACS on xxxxx Is Currently Runn...

I am trying to set up NAC in such a way that if one of our VPN clients does not have a certain version of the Symantec Antivirus or higher, it will only grant them access to the proper download. My current test scenario is Cisco ACS 4.0 and a Cisco ...