Network Access Control

Hi,Is it possible to create a group that can give access to certain commands only ? Can these allowed commands be added, removed from that group. For example user ISDN_test will be made a member of a group ISDN and in ISDN we will specify all some c...

Hi guys,what command can i use to turn on command accounting in pix like it is possible in the IOS.i need every command typed to be logged on the ACS server.

Hello!I have CISCO 5200 with the following config:aaa accounting delay-startaaa accounting update periodic 5aaa accounting network default start-stop radiusAlso, I have radius server (freeradius) connected with SQL database.Alive-packets (from cisco)...

When TACACS server is not reachable router is not allowing the local password to login using ssh. Router's SSH debug says authentication is successful but ssh client gets % Authorization failed meassage and disconnects.kindly see below debug output a...

Hi,whenever i try to authenticate a user through peap, and after installed the certificate and activate peap support, i obtain the following failed attempt message:EAP-TLS or PEAP authentication failing during SSL handshacke.Anybody knows how to solv...

I am implementing a DOT1X with ACS using external database ( AD ).When I launch telnet to SW4503, I can authenticate with my AD user/password. No problem.But, when I try to authenticate with my AD user/password into DOT1X box, it fails. DOT1X only au...

I'm using two ACS 4 servers to authenticate and configure vpn remote users. Now I'm trying to use the RSA token server: install primary and replica server. All seem ok.So I can authenticate successfully on primary ACS, but when I try on secondary ACS...

There is a problem with the certificate I used for enabling the https option, Now I cannot access the web interface. I am not getting prompted with a certificate. If I use http it automatically goes to https. There are no options for reseting the ...

Hi forum,Is there a way to use Radius to authenticate users(based on windows user accounts) when they are connected to the switches before granting them access to the windows environment?

Hi,I would like to deploy 2 ACS servers. One would be used to authenticate staff members and the other would authenticate guest users. I am using Catalyst 2950 switches in the access layer and Catalyst 6500 switches in the distribution layer. I will ...

Hi,I would like to know if the following scenario is possible:Let users in VLAN A authenticate to ACS A and users in VLAN B authenticate to ACS B.Any comments welcome.RegardsDean

We currently have an active ACS (windows version) running version 3.3 and recently stood up a second server with version 3.4. I would like to replicate the users, groups and network devices from the 3.3 server to new 3.4 server. The plan is get the 3...

Hey guys...first post here. I have recently taken over our Cisco network (I am extrememly new to Cisco by the way) due to issues witht he outgoing manager. Anyway, we have a need for a single authentication process on our network. We are in a Windo...

Hi. We have developped a Posture Plugin Dll and an ACS server. The server part works well, but I can't have the CTA to load our DLL. Thus, our ACS server doesn't receive our VAF and the device is quarantined. I ran the ctastat.exe utility which tells...

Hi All,One of our NAS server, is using a default string for User-Password attribute value in the event that no password is set by the user in PAP authentication mode.How can we ignore that value or set it to Null under CAR in order to use the AllowNu...