Network Access Control

I have several Aironet 1100 AP's which are configure to use EAP/TLS to authenticate against a Cisco ACS server. We are using Aironet 350 pcmcia cards. This setup had been working up until friday when we moved the ACS server to a new IP address. Since...

I am using an aysnchronous interface on a router for dialup connections. I am using CSACS RADIUS for user authentication and authorization. I have also configured downloadable IP ACL's on the CSACS server. A packet capture shows that the ACS serve...

Hi all,I currently have in place wired Dot1x on an IOS switch. I have the following method list configured.AAA new-modelAAA group server radius radserv Server XX.XX.XX.XXAAA authentication dot1x default group radserv noneAs I understand it, this con...

Hi, I know in the ACSE one can limit the number of simultaneous sessions for a given user; but is there a maximum number of sessions any one user can have open if they aren't specifically limited? (i.e. - Is there anything to prevent one user from ha...

I need the equivalent command for configuring AAA on a CATOS

Hi,I have an existing ACS SE 1111 running 3.2(1) software and I just received a replacement appliance 1112 running version 4.x ACS software. I can't seem to find any information about upgrading from the older appliance to the new appliance. Is there ...

How do I configure the same user account coming in from different NGD to authenticate against different external DBs. I.E user coming in from VPN 3080 against OTP Server and same user coming in from WEBPortal against LDAP.

Hi,I have a ACS 3.3 Server set up to authenticate externally via an LDAP Server. When authenticating my VPN users it works well as im using the Cisco VPN 3000 Radius Option. When authenticating Tacacs users it works well.However when attempting to au...

I have two crypto map, one dynamic for my vpn clients and another for vpn site-to-site. The thing is that the vpn site-to-site works perfect until I put authentication for the dynamic vpn. After that, my vpn clients authenticate perfect but my vpn si...

I have configured Aironet1200 to work on PEAP mode and windows xp client to authentication using PEAP ms-chapv2. And the Windows xp user has been added to the user database of ACS. Then I tried to connect the Windows XP computer to the wireless netwo...

We are in the process of setting up a wireless network using ACS 3.3(1) and Cisco 1200 Access Points. The access points have several SSID’s configured, each on it’s on VLAN. Two of the SSID’s are used by XP SP2 clients to logon to a Windows 2003 Acti...

Hi.I configure a router for tacacs+ access and the console and CLI work fine.HTTP access continually prompts for password and I can never gain access via web.I have tried the various cli combinations of IP HTTP AUTHENTICATION, but still does not seem...

I've users setup for network access via vpn on an ASA. I've a long list of usernames and passwords on the ASA and I hate it. I want the vpn users to be authenticated against an ACSv4 server via AAA. Is there a doc anyone can point me to or show me ho...

I have the ACS Appliance and wanted some advice on doing an upgrade to 4.0. ANy info or documentation would be great. From what I am reading, it looks like you need to do a backup of the data and then insert the CD and let it ride....Any help would...