Network Access Control

hi i have a problem guys.. i am using an asa firewall with cisco acs 3.1. i want to use authorization with cut thrgh proxy using tacacs+..access-list auth_prxy extended permit ip any anyaaa authentication match auth_prxy inside acsaaa authorization m...

I have configured authentication for the outside users to connect to my servers using the following sample aclaccess-list 110 permit tcp any host 10.10.10.3 eq httpaccess-list 110 permit tcp any host 10.10.10.4 eq httpaccess-list 110 permit tcp any h...

hello all,i've an ACS 4.1 solution engine. i would like to implement 802.1x on my 26 switches which are connecting to 6500 core. so in this scenario where should i place the ACS 4.1 box.and in edge switches what all things i've to do, enabling 802.1x...

we have acs 3.2 and is used to authneticate windows AD users. Its authenticating fine. recently we created a new group called rdp in windows. there are few users in that group. we need them to use vpn and authneticate against AD the same way , the ot...

helloI configure my cisco devices byaaa new modelaaa authentication login group radiussrv localconfig radiussrv group all is OKbut all users authenticated by radius have access to shell. but i need to give cisco shell access only to one group in AD.....

We are trying to upgrade from an ACS 3.2 for Windows server to our new ACS 4.0 SE box. We have upgraded the Windows box to 4.0, backed up the configuration and restored it to the new box. We have pointed a couple of clients to the new box for testing...

Does anyone know how you can secure dial up connections into a Cisco 3620 Router using RSA securid.We currently use a Radius server which works fine but we want to extend this to use Securid.

Hello,I am trying to create a tacacs config that will make sure that when you log onto the console you do not get tacacs and that we are on line login and local enable. If connectivity to the tacacs server is lost, the login for telnet defaults to th...

any one setup PPPoE w/dual stack?

Is there any way to modify the page https://interface_ip[:port]/netaccess/redirect.html The message "You are not logged in." is confusing to end users.

I have a pair of 3.3.2 windows servers that need to be upgraded to 3.3.4. Is there any issues that I should know about before I do this upgrade. I assume I should do the backup servers first.Thanks in advance.Mike

Hi,I'm trying to use the aaa cache mode for command authorization. But when I execute a command there is always an error message:% tty2 Unknown authorization method 6 set for list commandThe command is then always authorized against the tacacs server...

I am testing a Cisco ACS 1113 Appliance V4.0 for Wireless LAN Authentication. I have installed the Windows Agent on a Windows 2003 Active directory Server and I have installed a Certificate on the ACS and intend to use PEAP.Has anybody been able to g...

We are currently running ACS 3.3 and I am trying to figure out how to restrict Wireless access to specific user groups. Our current setting is using PEAP and ACS as the Radius. Our user database is mapped to Windows 2003 AD. I've got the PEAP working...