Network Access Control

How can I configure my ASA 5520 to authenticate each VPN group if the user are in an specific AD group. For exemple I have 2 VPN groups:AccountingsalesAnd I want each user to authenticate only if he is within his/her specified AD group. And I'm using...

I have a VPN concentrator 3005 that is configured for WebVPN which works great if I login with a local user. I would like to authenticate my users through our LDAP. I created a SSLusers group that is setup for external authentication. The SSLusers gr...

Just purchased the above mentioned and i can't get into the appliance.-Upon successful boot-up,i'm prompted with the "lock notice" capture asking me to either connect via serial or web.-I've tried to console in the appliance using the provided serial...

I need a Nebs complaint AAA, DNS and DHCP server(s) for a large 4000+ site, network. What Cisco product would you recommend I use?

Dear All,i have a unique problem with the ACS v 3.3.2 what happens is that when i install the acs v 3.3.2 on windows 2000 advance server and run the acs admin i get a http-500 internal server error and when i refresh the page several times i get the ...

I have a client that wants to use WPA2 authenticated to the Windows Active Directory and also has an RSA ACE Server. The goal os to provide 802.1x security with these 3 devices. I am NOT looking to USE the RSA tokens for this, only the underlying RSA...

Is the radius key string in the running config for an aironet AP displayed in plain text or a hash? Thanks in advance

I cannot seem to find the correct URL to enter into ACS for the CRL (certificate revocation list). The CRL is published to active directory. We are running server 2003.Does anyone know the proper format?

Just want to know whether SNMP is supported in ACS 4.0 for Windows and how do i configure it...?ThanksMohan

Hello,I have some WiFi AP and I am working on to introduce centralized authentication with ACS: using PEAP. All MAC address is registered in ACS as user and my question is how can I forbid for these MAC addresses (users) that they can't access the VT...

Do users behind a remote 3002 use the Base Group definition for Authentication Server choices? I have the Group defined as "Internal" to represent the user defined on the 3002, but I'm not sure where the users behind the 3002 are authenticating.Any h...

i am using cisco 3750 switch with radius configured on it. Al works fine for dot1x authentication. The come appears when ip phone is in the picture. phones stop working when dot1x is configured on port and they dont come up until user is autheticated...