Network Access Control

Guys,I?ve configured AAA on network devices for access authentication against ACS (3.2 on Windows). ACS is configured to authenticate users against Windows AD accounts. ACS is configured properly and I?m able to login using AD accounts onto network...

Hi, can you help me on this ?Cisco ACS 3.3.Goal:I want to allow only users members of security group 'myActiveDirectoryDomain\WirelessACS' be able to authenticate.I am doing this in a lab environment before going into production:On ACS 3.3, I mapped ...

I am having an issue with the UCP website not functioning correctly. I have installed it from the ACS 4.0 CD, following the instructions from the Cisco.com website, but cannot get past the Login page. Users can get to the Login page, but after they...

I am running RADIUS on Windows 2003 Enterprise server and configured the 3725 router for AAA. The AAA/RADIUS is working fine, but the detailed logging in Windows seems to be very limitted. Does anyone know if there's any other tools that can captur...

Hi,I need to authenticate administrators to access Cisco ACS 4.1 running on Solution Engine using external TACACS.Is it possible? If yes, how to configure Cisco ACS?Thanks.Stephane

I have configured 802.1X VLAN ASSIGNEMENT VIA RADIUS.When the client is catalyst 2950 working fine, I get vlan assignement in my user, but with a 3750 12.1(22) I get the next messege in the radius:Message-type: Bad request from NASAuthen failure cod...

Can I use ssh with TACACS? I would like the authentication to be fully encrypted and I believe Tacacs send the clear text as oppose to ssh. If someone can point me to the a doc or a sampe config for Cisco routers and switches I would appreciated it.T...

I'm trying to enable SSH-only access to a Cisco 4006 running CAT OS 8.4(11)GLX with local authentication. SSH works fine, but telnet access is still available. How can I disable telnet access?

Hello,I am installed TACACS+ on a Windows Server I defined two users to test the configuration. On the PIX firewall I have a VPN configured for PPTP. I want the PIX to authenticate the user for the VPN against the TACACS+ server. I also want the PIX ...

We currently have version 4.0 ACS.When defining a Network device such as a core switch on the lan is there a way to get the tacacs server to use the loopback address of the switch instead of the ip address on the connection.Otherwise this will mean h...

Below are the devices I used in my network.ACS Server:ver 3.3Active Directory: Win2000 Server SP4 installed with cisco remote agent.Switch:Cat2950 12.1(EA)1aClient Workstation: WinXP Pro SP2I've enable dot1x on the switch and everythings works fine f...

Hi,I?m trying to deploy EAP-TLS authentication method on ACS v4.0 for my local wireless users; really I stuck with the certificate issue and need your assistance to understand the required procedures to accomplish the task.As mentioned on the ACS con...

Hi, we have radius as default authentication/authorization for Remote Access users on the VPN3k, now i want to create a WEBVPN group and users that use INTERNAL authentication instead of the Radius. I moved to the TOP LIST of SERVERS the INTERNAL aut...

We've had ACS in and working for our Wireless network for the past 8 weeks, then on friday we started having problems with user authentication. As far as we can check nothing has changed on the ACS or WLC we think it's a change within AD thats caused...