Network Access Control

Running ACS for windows version 3.1, installed the User-changeable password utility (UCP).Intermittently when users try to change there passwords they go to the website enter there current ID & password and they are getting "Error:Login failure". Che...

Please provide me the steps for implementing TACACS in cisco PIX515 with version 6.3(5)

Hello,We have very strange things happening concerning the logged-in users list :1) We have users that stay logged eternally, they stay in the logged-in list, nevertheless they are not connected.2) In the logged-in list we see numbers instead of user...

We need to update the expire-date for our users on our ACS-Server. With ACS 3.3 you need to make a csv-file with content like this:1,0,username,,113,,20080131,,,20/12/2006,,,,0Afterwords you have to choose the RDBMS synchronization from the webinterf...

How can configuring NAC L3 in acs 4.0?

Hi Guys,Currently having trouble with AAA auth using secureID tokens when trying to access the built in Ciscoview (v1.1) for the 6500 and CSM.The current AAA works absolutely fine when telneting to the device using secureID and have set up http authe...

I cannot disable DHCP on a Cisco Secure ACS. I am consoled into the device and run "set ip", choose "yes" for static IP and enter my IP information. However, after save, network test, etc... DHCP is still enabled and grabs an address on reboot. Anyon...

i have acs 3.3 SE and i am trying to run PEAP for wireless client so i created certificate using CSR but the validate periode for certificate is one year ,,1- haw i can exptend this periode .. like 5 years 2- if i run self signe certificate (default ...

Guys,The following configuration for authentication and authorization doesn't work on 6513 alone. But same configuration is working on 100+ CAT switches. I have verified that ACS server is reachable from 6513 and entry is available for 6513 on ACS se...

I have configured ACS 4.0 and an 2003 Enterprise root CA on the same server, successfully applied the GPO to auto-enroll machines with Computer certificates, and then enabled 802.1x security on Catalyst 3750s. Note this is for wired 802.1x.If I reboo...

Hi all,I have the following configuration on my routers:aaa new-model!!aaa authentication login default local group tacacs+aaa authentication login console enableaaa authentication enable default enableaaa authorization exec default local group tacac...

Can I use Command Auth Sets in CiscoSecure to provide a subset of configuration commands? I want to give Interface commands, but not anything else.

I'm seeing posts that hit all around my questions, and based on my intereptation of the documentation it appears that there is no "shell exec" authorization available to the PIX when configured to use a TACACS+ server for authentication. Is this true...