Network Access Control

Is their a command that will bypass the aaa authorization from a particular host? I would like to use something like the aaa mac-exempt command, but have it only exempt on the authorization part. Background: i have a firewall management station that ...

Pix 7.2.0 doesn't have "inspect esmtp" line added. But, authentication when sending a mail from wan doesn't work (mail server is in DMZ). When you try it from LAN - it works without problems.Is it possible that pix block smtp authentication from WAN ...

Hi, I've defined ACS groups "Wireless" and "VPN". I created the same groups in active directory and mapped them accordingly on ACS.Therefore on ACS, "Group Setup", the drop down box lists 3 ACS groups:"0:Default""1:Wireless""2:VPN"At this point shoul...

Hi,I have a situation where I have 2 groups in ACS called wireless and VPN. I have successfully mapped these to 2 AD groups called the same. My requirement now is to restrict the wireless users so that they can only authenticate through an access poi...

I there !!1I have a network that uses MS IAS for Radius auth in a wireless network. I'd like to setup 802.1x in all the switchs we have. The auth thing is simple (I hope). I've Found information on assigning user to a Vlan thru a radius response, but...

Hi all,I have configured my remote switch with the following AAA local authentication configuration.no enable secret no username hotel no aaa new-modelusername s1umb3r password p3ac3fullyenable secret tryt0h@ckth!S!s1umb3raaa new-modelexitwrAfter I h...

Hello,Which Protocol do I need to use, for providing dynamic VLAN to my desktop machines?As in ACS 4.0 if I use local database of ACS then users successfully get the dynamic VLAN & as soon I use AD database while integration it with ACS ,the authenti...

I am trying to configure local AAA feature in IOS ( 3640 router - WITHOUT using external AAA server auch as Cisco ACS) to define per-user authorization and to addign atrributes such as IP addr and ACL etc bind to a particular username.Is there any sa...

hi,ive a problem with some wlan-users and machine authentication. mostly users are pass machine auth but sometimes the login fails. in the auth.log are the following entries:AUTH 25/10/2006 13:43:51 I 0897 2216 AuthenProcessResponse: process response...

Relevant background: Win2k3 Active Directory used for passwords, usernames/groups local to ACS (version 4.0), mixture of 2960s, 4900s, 6500s.Goal: I'm trying to lock down a small set of users (2-4) to have read-only access to a few switches, and zero...

I have downloaded and installed ACS 4.0 Trial Version. I was wondering if there is specific documentation available for integrating ACS with an external database - namely Active Directory? I have a 3560 and an ACS 4.0 box configured and I cannot get ...

Hi Experts,is there a way to allow user / group in the acs to access comm equipment with telnet only (not allowed to use ssh or http)many thanks

hi,While Integrating ACS with Windows AD,why it is required to make the Account with name Cisco ?? Please check the attachment.

Having issues with XP Pro users and getting consistant response using 802.1x on C3750G Switch.Problem when user has an auto login and is part of a Domain.Any experience, wise words?Thanks,Bob