Network Access Control

Hi AllSituation: I have a Router that has TACACS+ Auth enabled verifying against ACS 3.3.3. This router has also has a number of Async lines that provide out-of-band access to other network devices. I allow a “security” group defined in ACS access ...

This is regarding remote VPN connectivity to PIX from vpn client. VPN group is getting authenticated . But local user as configured in following commandcrypto map abc client authentication local. User is not getting authenticated.If this command is ...

I'm trying to setup IP-based network restrictions for users on my ACS server. This is easy enough to do manually but i want to add these via RDBMS and the accountactions.csv file.my problem is the documentation suggests the following:"V1 should cont...

I would like to know on 3745 and 2811 what is the maximum size or number of users/line for local database authenticatione.guser1 password 0 temp1user2 password 0 temp2how many users I can put in?Is there a maximum number of lines limit in IOS configu...

Hi,i have the following Problem:VPN Clients (Vers. 4.6) tries to connect to the VPN Concentrator 3020 (Vers. 4.1.7)the Authentication will be done with the sequence of ACS and ACE.This Authentication sometimes works and sometimes doesn't work.For you...

smtp mail server is ok ,when i stop cisco ACS server,it does not send e-mail to my mail-box,why?

Hello,What would be required to have an ACS server in a DMZ talk to the active directory domain that is on the outside of the fw.ACS-----(dmz)PIX(outside)---AD DomainOne department owns the DMZ and wants the ACS server to be in the DMZ and the other ...

I have a 3002 concentrator connecting to a 3030. Using Lan Extension Mode. The 3002 is using DHCP to assign addresses. I want the users connecting to the 3002 to be forced to authenticate with a domain server on the head-end (3030 side). I want no on...

I´m doing some tests with the new 802.1x authentication feaures in the CAT2960 switch and IOS firmware file 'c2960-lanbase-mz.122-25.SEE.bin'. In particular, I´ve configured the 'Inaccesible Authentication Bypass' feature. What is wrong with it is th...

I am trying to create a seperate group called "WebVPNuser" and enable Webvpn permission only for that group and use Local authentication for users in WebVPnuser group. What i observe is users (under webvpnuser group) do not authenticate using WebVPNu...

Hi,I need to import the user and groups from version 2.6 ACS to version 4.0. The 2.6 online documentation talks of using the CSUtils to create a .txt back up of the users and group. But I cannot see how to import that into 4.0. Has anyone done this. ...

Is there possible to limit/control one concurrent connection per-user id with local database on PIX firewall?

hi could someone pls tell me where on the acs to configure the command level authorisation for users to access the routers.pls help i am new to this. i am also using a evaluation copy of it. sebastan