Network Access Control

Hi,I have configured a PIX with the following commands:aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXaaa-server TACACS+ (sopdc) host 10.XX.XX.XX timeout 20 key XXXXXXXXXaaa authentication serial...

I want to automatically run a login script after my VPN Client has authenticated and built the tunnel. I tried using the VPN Client's Application Launcher, however that runs the application immediatly when the connection is launched and doesn't wait ...

Hi,We have a Checkpoint Firewall using ACS for authentication with RADIUS protocol. We have two ACS servers configured as primary and secondary on the Checkpoint. Both the ACS servers are configured to use AD as the external database. Checkpoint is f...

I am currently developing a Java application that interacts with the CISCO ACS for Authenticating passwords using Tacacs+. My problem is that when a user's password is about to expire the getServerMesage() function does not return any message. I look...

Hi all,We have a line unused in the aaa config:aaa authentication login default group tacacs+ localthe one used in the vty is:aaa authentication login Tacacs group tacacs+ localDoes it make sense maintain that line while is not being used? Or maybe i...

When upgrading we followed the steps outlined in the upgrade documentation and everything went fine until we did the new base image and tried to restore the 4.1.1 database. Upon restoring the database the system slowly became inoperable to the point ...

Does all IOS support the above? Do I need to look for the feature set that support it? Which version and above uses this command "crypto key pubkey-chain dss" and which version and below uses the old command "crypto public-key"

Can't find a command ref for a new Pix (vers 7.2(1)13 )) for this command >>ip tacacs source interface <<. Also, can't enter this command into the Pix.

HI, i am using the similar config in my Cisco ASA listed below in the website of the config. in that user marty is a local user name for authenticating the ASA via SSH from LAN, but user marty is also able to login VPN, how do i avoid that MARTY user...

Hi all, i was trying to authorize the asa with acs 3.2 on priv lvl 7 using tacacs+,but the users were geting priv-lvl 15 only..aaa-server aaa_serv protocol tacacs+aaa-server aaa_serv host 10.0.0.10 key cisco123aaa authentication serial console tac_se...

Since my previous question got answered quicker than it would have taken to open a TAC case I figured I would post another problem.I had an NDG created and goofing around deleted it. It had a AAA client in it and whenever I try to recreate that AAA c...

Good morning.We have the ACS Security Appliance and it is on version4.1(1) Build 23 Patch 4.I am in the process of setting up a couple of NDGs. One of the NDGs I would like to have for our key routers and the other for our switches. The switches will...

I would like to restrict user access to web via username and password on a Cisco 851 router. In other words I would like the user to be prompted with a user name and password in order to access web content. Is this possible via AAA or ACL?Thanks,Ray

I have Cisco ACS appliance 1112-K9 appliance on which ACS 3.3 is running. Since this is an appliance for which SAS is not applicable, please suggest how I can upgrade to Cisco ACS 4.0 without incurring additional cost.