Network Access Control

Hi All,We recently migrated to using SSH for accessing network devices rather than telnet.We have automatic expiration of passwords after 90 days and users are forced to change the passwords after that. With telnet we do not have problems. However wi...

I recently have some problem with the Cisco ACS server, which is the login authentication server for my switches and routers. Everyday at a certain period of time, I just can't login to the gears; or I can login, but after dozens of attempts. A "de...

Hello all. We're currently running ACS 3.3.3 and are wanting to restrict access for a particuler user based up on his MAC address, simply wether or not he can connect or not. It doesn't necessarly need to be the MAC, but something unique to that Host...

I have a router with needs to be authenticated by two ACS Server for two different functions. Eg. for ISDN dialing into the router, it gets the authentication from ACS A. While for command authentications, the router needs to talk to ACS B. Can this ...

I'm trying to force my router to use loopback0 or 1 interface to authenticate to TACACS server and I enter the commandip tacacs source-interface loopback0 and it still used one of the vlan in the router and strange this when I do show run I don't eve...

I have been informed that I am to move the ACS 3.3 from one server to another. So I have some basic questions.1) Should I just copy all of the Cisco ACS 3.3 files already under program files to the new machine or should I just do a fresh install? 2) ...

Hi,I have installed RADIUS server on linux, my switch which I have installed for testing purspose is not getting authenticated , though I have initiated aaa on cisco defining IP add of RADIUS host and 1812 as port number.On RADIUS server itself local...

Can somebody explain me meaning of follwoing commands in the link given below.1)aaa authentication login default local group RTP noneIn this command default is local will it prompt user to TACACS 1st.2)ip auth−proxy name list_a http and ip auth−proxy...

Hello,I am struggling to integrate my AD server with ACS to acheive the dotix authentication for Wired machine.Please provide some useful link for the same.Thanks in advance.

hi,I have this internal web server protected by the pix. now I want the pix to use aaa and ask for authentication when the user tries to connect to the firewall which by using static send the request to the web server.this is my code,access-list from...

Hi. I?m doing a theoretical pre study about about ASA/ACS/AD integration. From what I can find in the documentation of Cisco ACS it is possible to map Active Directory user groups to ACS groups and thereby give user different authority in the network...

We have configured 2 AAA servers for Wireless authentication purposes. Now everything falls to the backup because the primary is marked as dead :What are the points to check what is wrong ? The primary server is up and running, perhaps a problem with...

Dear Sir:After implemented Tacacs+ in my router, I no longer able login to the Service-Engine (CUE) with 'service-module service-Engine 2/0 session'Here is my config:aaa new-modelaaa authentication banner ^CCCUnauthorised use is prohibited^Caaa authe...

How do i create a read only account for tacacs so someone can view reports and whatnot?