Network Access Control

Hi. I?m doing a theoretical pre study about about ASA/ACS/AD integration. From what I can find in the documentation of Cisco ACS it is possible to map Active Directory user groups to ACS groups and thereby give user different authority in the network...

We have configured 2 AAA servers for Wireless authentication purposes. Now everything falls to the backup because the primary is marked as dead :What are the points to check what is wrong ? The primary server is up and running, perhaps a problem with...

Dear Sir:After implemented Tacacs+ in my router, I no longer able login to the Service-Engine (CUE) with 'service-module service-Engine 2/0 session'Here is my config:aaa new-modelaaa authentication banner ^CCCUnauthorised use is prohibited^Caaa authe...

How do i create a read only account for tacacs so someone can view reports and whatnot?

Router c2600 authent with tacacs+From router debug:TAC+: received bad AUTHEN packet: version = 193, expected 192TAC+: received corrupt data from serverWhat's the problem ?Thanks in advance

Hello,My scenerio is:1- MS IAS Radius1- Cisco 3560 24PS -s w/ 12.2(25)SEB IOSUsing 802.1x Port Security w/Windows XP Supplicant or IP Phone with Embedded EAP/MD5 Supplicant.Problem,After configuring the Switch/Port and IAS per supporting Cisco and MS...

I am currently using 8021x mac authentication bypass to authenticate client machines against active directory using IAS. I have also implemented dynamic VLAN assignment. Everything works great. The problem is that the username/password combination (w...

I'm trying to migrate an ACS for Win (v4.0.1.27) to ACS SE (v4.0.1.42) but it fails as the versions are different.Does anyone know if an upgrade for ACS for Win to 4.0.1.42 exists? Or if a distribution image of ACS SE 4.0.1.27?

Hi,I am currently in the middle of installing CiscoSecure ACS 3.3.16 onto Windows Server 2003 for the first time.I am getting the error External DB account Restriction each time a client tries to authenticate.....Is there anything I should look out f...

Hi All,Is it possible to create an LDAP database configuration and the related db group mapping via RDBMS on ACS windows version (Release 4.0(1) Build 27)?What I'm trying to do is maintaing the ACS configuration dynamically up to date with an externa...

I have a 6509 with a Sup2/MSFC2 running in hybrid mode and I'm trying to use TACACS for authentication/accounting on both the SP and MSFC. For some reason, the MSFC and the ACS don't talk, but the SP works just fine.The MSFC config is as follows:aaa ...

Hi,What all is needed on the ACS to configure the IBNS Solution.Thanks in advance.

I am testing with a 3750 PoE switch running 12.2(25)SEE1 and trying to configure 802.1x to work with Mitel IP phones.I have voice and data vlans configured on each port. Turning on 802.1x causes the phone to hang and timeout in DHCP Discovery. The po...

Hello all,We are a recent addition to the ACS 4.0 crowd and had a concern about router/switch user authentication using AAA and ACS with an external database.We have several routers and switches working just fine with ACS using an external database (...

I have an ACS appliance set up for TACACS auth for administrative users. I need to configure 802.1x with RADIUS as I'm sending the VLAN ID back down when the user authenticates. Is this possible? Doesn't seem to be working for me. Also, I am doing th...