Network Access Control

I'm trying to migrate my configuration from a Linux based Tacacs+ server to the Cisco ACS 1113 appliance. Does anyone have any recommendations.Thanks.

Hello all, I am working on an 802.1x lab and proof of concept and have 2 problems. Solving either of them will have me good-to go. Just for reference I have:1) enabled and tested workstation authentication2)can succesfully authenticate users an...

Is ACS 4.0 supported to run on a virtual machine based on VMware ESX server (2.5.3 or VI 3)? I've heard from some people that there is a problem when running in a VM with the ACS services restarting by themselve, is this true?Thanks for your helpCarl

We?re running Cisco Secure ACS for network device authentication, authorization, and accounting in a multivendor environment. As you can probably suspect we?re have issues with the non-Cisco devices. The devices in question are a Marconi BXR-5000 mul...

Hi,Basically we are planing to implement 802.1x in conjunction with a ACS appliance. The plan being that end user auth's it will allow access to certain areas of the network (specific VLAN's and specific ports, all of which are audited). My question ...

I'm having a strange problem with a few routers sending invalid characters to my TACACS server. Example is it's trying to authenticate part of the banner. Here's the aaa config and part of the debug.aaa new-modelaaa authentication login default grou...

Hi,I am currently in the middle of installing CiscoSecure ACS 3.3.16 onto Windows Server 2003 for the first time.I am getting the error External DB account Restriction each time a client tries to authenticate.....Is there anything I should look out f...

Hi All,We have a NAS (AS5350) to provide dialup service for branch offices. Cisco ACS 4.0 (Radius) is used as the AAA sever. We would like to apply acl to the dialup client to control the access by using filter-id attribute. The acl can be applied an...

I have been trying to set up a switch to do the following:1) Use 802.1x port level authentication2) Assign VLAN to the client based on username/group3) Assign IP address to the clientI am using 3750 switches w/ IOS ver 12.2.25 and ACS server ver 3.3....

i want my local lan users to be authenticated through the pix before accessing any web/outbound servcies I do not want to use any external authentication servers is that possible

Hi all, i am facing an issue when i integrate my acs 4.0 with open ldap or domino ldap.i have configured external database and in unknown user policy i have selected the respective database.in group mapping i selected the created database and c...

Hi All,How can I configure a user-defined port to allow http access on a Cisco ASA 5510?Thanks

Does the ASA5550 support redundant AC power supply ?RegardsMohamed

We have enabled ODBC logging. The Authen_Failure_Code values come across as a numerical value and I am looking for a chart that would have the meaning of those numerical values so that I can have our database supply a verbose value in the field.

I have got PIX 501 Firewall Software versions 6.3I have adjusted ACS_3.3 server and now can authenticationenable password ciscoaaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (inside) host 1.2.3.4 ciscokey timeout 5aaa authentication telnet con...