Network Access Control

Can you add ACS(aaa) for PPTP to cisco2600 connection?

i have created this PPTP connection to a cisco2600, but i want to add an ACS server for authentication and accounting function, is that possible? i can do it for VPN client to router, cannot find anything about PPTP to router with ACS. any help would...

RADIUS / TACACS Authentication across the internet

Does anyone have a veiw on whether it is insecure or not to do authentication across the internet. If I have a number of sites with PIX firewalls providing VPN access for remote users could I authenticate these users across the internet to a AAA serv...

ACS 3.0 simoultaneos sessions limit

Hi, i have2 win 2000 servers with ACS 3.0, i have limited the sessions per user to 1, but it doesn't works. I have a test scenario, and there its working. Any idea why in the test scenario works and in the production scenario don't works? Thanks,....

Cisco ACS 3.0

The Cisco ACS 3.0 's is quite a lot of money, why is so expensive? i only need manage access for my switches and routers in my company, i do not have dial-in access. Must I look for another option?thanks.

PIX http Authentication & Terminal server

Hi , I've got a design question. I've to set up a firewall solution for a company which is using some terminal servers for their users. What I'm concerned about is how PIX would handle internet connections coming from the same internal IP add...

How To Change RADIUS Ports On ACS 3.0

Is there a way to change the ports that RADIUS listens on from the default?

Cisco ACS 3.0

We have installed the Cisco ACS 3.0 server(evaluation copy), after the setup, we are able to authenticate the Shell(Telnet) users logging on to the NAS, but we are not able to authenticate the PPP users on the dialup, there seems to be no problem on ...

ACS 3.0 - Router authentication over WAN

The router has been to configured for AAA from ACS over 64 Kbps location. Router attempts to obtain authentication info from server but fails (ERROR) and jumps to next authentication option (local or none). Router ver:12.07T .The ACS client IP addres...

any way to merge to master ACS servers via replication?

I am trying to merge the network settings and local user & group databases between to master ACS servers. My understanding is that when you do replication it copies a "mirror" image of the field in question and pushes that out to replication partners...

Reading resource - ACS 3.0 use of NDG and NAR

CAn anyone point me to resources to undertand the operation and interrelation of Network Device Groups and Network Access Restrictions. Also specificall yin th euse and abuse of the AAA Client called "All AAA Clients"

ACS 3.0 controling access to router aux port (2001)

I'm trying to setup ACS 3.0 to permit access only to the aux port for a router. I have a PABX Console port hangin aux 0 so I'm using the router as a kind of Term Server with authentication and central logging. The obvious config step is to specify...

ACS 3.0 overlapping device groups

Trying to restrict users to a single device group e.g. 172.17.*.*. I can get it to work fine using "Network Configuration-> Network Device Groups"but I can't set up overlapping NDGs.Now I can't get NAR to restrict access. ** My NAR call "172.17-Eur...

Cisco VPN, NT authentication, and password expiration

I currently have users that access our Exchange servers via Cisco VPN client to my VPN 3030. Authentication is NT domain, and works great for most of us. The problem is my NT admin setup 250 more users, and set password expiration on next login. I w...

VPN 3.5 Client Authentication with Active Directory

Can a 3.5 software client be authenticated on a 3060, and the users be authenticated by Microsoft AD? I know it gives you the option of NT Domain, Radius, SDI, or internal. I tried setting a group to external and setup an authentication server of one...

3000-client authentication on a NT4 IAS

Hi,Is it possible to use an IAS installed on a NT4 PDC/BDC to authenticate VPN3000-clients connecting to a PIX515? It seems not to work using "domain\username" in the VPN-client?Or do I need to install the IAS on a standalone-server and use local use...

Network Access Control

Forum Posts

Can you add ACS(aaa) for PPTP to cisco2600 connection?

RADIUS / TACACS Authentication across the internet

ACS 3.0 simoultaneos sessions limit

Cisco ACS 3.0

PIX http Authentication & Terminal server

How To Change RADIUS Ports On ACS 3.0

Cisco ACS 3.0

ACS 3.0 - Router authentication over WAN

any way to merge to master ACS servers via replication?

Reading resource - ACS 3.0 use of NDG and NAR

ACS 3.0 controling access to router aux port (2001)

ACS 3.0 overlapping device groups

Cisco VPN, NT authentication, and password expiration

VPN 3.5 Client Authentication with Active Directory

3000-client authentication on a NT4 IAS

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

ASA SP for SAML (Micrososft MFA) + ISE for Authorization

ISE 3.0 and SecureX Orchestrations

Can AnyConnect ISE posture popup action be changed?

FIPS Radius Key-Wrap configuration for Switch

FN - 72466 : Passive ID WMI and MS KB500442 compatibility

Cisco ISE Alarms email notification issues

Is the pxGrid profiling option necessary for pxGrid function?

Wilcard Certificate for Cisco ISE admin portal

trace route to ISE interface

Certificate based auth: which values are checked in AD?