Network Access Control

helloI configure my cisco devices byaaa new modelaaa authentication login group radiussrv localconfig radiussrv group all is OKbut all users authenticated by radius have access to shell. but i need to give cisco shell access only to one group in AD.....

We are trying to upgrade from an ACS 3.2 for Windows server to our new ACS 4.0 SE box. We have upgraded the Windows box to 4.0, backed up the configuration and restored it to the new box. We have pointed a couple of clients to the new box for testing...

Does anyone know how you can secure dial up connections into a Cisco 3620 Router using RSA securid.We currently use a Radius server which works fine but we want to extend this to use Securid.

Hello,I am trying to create a tacacs config that will make sure that when you log onto the console you do not get tacacs and that we are on line login and local enable. If connectivity to the tacacs server is lost, the login for telnet defaults to th...

any one setup PPPoE w/dual stack?

Is there any way to modify the page https://interface_ip[:port]/netaccess/redirect.html The message "You are not logged in." is confusing to end users.

I have a pair of 3.3.2 windows servers that need to be upgraded to 3.3.4. Is there any issues that I should know about before I do this upgrade. I assume I should do the backup servers first.Thanks in advance.Mike

Hi,I'm trying to use the aaa cache mode for command authorization. But when I execute a command there is always an error message:% tty2 Unknown authorization method 6 set for list commandThe command is then always authorized against the tacacs server...

I am testing a Cisco ACS 1113 Appliance V4.0 for Wireless LAN Authentication. I have installed the Windows Agent on a Windows 2003 Active directory Server and I have installed a Certificate on the ACS and intend to use PEAP.Has anybody been able to g...

We are currently running ACS 3.3 and I am trying to figure out how to restrict Wireless access to specific user groups. Our current setting is using PEAP and ACS as the Radius. Our user database is mapped to Windows 2003 AD. I've got the PEAP working...

HiI upgraded 2 ACS ver 3.3.2 servers to ver 4.0.1 the upgrade worked perfectly fine but when I restarted the secondary acs, the ACS services are on starting status and CSlogs service shows stopping. any idea why?thanks in advance.

Hello,I am having difficulty installing user-changeable password utility on CiscoSecure ACS for windows 2000/NT.This is happening after a successful installation in the test environment but has failed several times on the production servers.

Hello,in ACS3 i changed my Authports to another value as 1645. In ACS4 i missed this topic on ACS-Servers Registry.Could somebody help me?ciaoRonny

Hi, since we upgraded our pix to version 7 tacacs replication has been failing with a 'server not responding message'. Nothing has changed on the servers and they I see a connection on port 2000 made through the firewall which is active for 5mins (th...