Network Access Control

I have been informed that I am to move the ACS 3.3 from one server to another. So I have some basic questions.1) Should I just copy all of the Cisco ACS 3.3 files already under program files to the new machine or should I just do a fresh install? 2) ...

Hi,I have installed RADIUS server on linux, my switch which I have installed for testing purspose is not getting authenticated , though I have initiated aaa on cisco defining IP add of RADIUS host and 1812 as port number.On RADIUS server itself local...

Can somebody explain me meaning of follwoing commands in the link given below.1)aaa authentication login default local group RTP noneIn this command default is local will it prompt user to TACACS 1st.2)ip auth−proxy name list_a http and ip auth−proxy...

Hello,I am struggling to integrate my AD server with ACS to acheive the dotix authentication for Wired machine.Please provide some useful link for the same.Thanks in advance.

hi,I have this internal web server protected by the pix. now I want the pix to use aaa and ask for authentication when the user tries to connect to the firewall which by using static send the request to the web server.this is my code,access-list from...

Hi. I?m doing a theoretical pre study about about ASA/ACS/AD integration. From what I can find in the documentation of Cisco ACS it is possible to map Active Directory user groups to ACS groups and thereby give user different authority in the network...

We have configured 2 AAA servers for Wireless authentication purposes. Now everything falls to the backup because the primary is marked as dead :What are the points to check what is wrong ? The primary server is up and running, perhaps a problem with...

Dear Sir:After implemented Tacacs+ in my router, I no longer able login to the Service-Engine (CUE) with 'service-module service-Engine 2/0 session'Here is my config:aaa new-modelaaa authentication banner ^CCCUnauthorised use is prohibited^Caaa authe...

How do i create a read only account for tacacs so someone can view reports and whatnot?

Router c2600 authent with tacacs+From router debug:TAC+: received bad AUTHEN packet: version = 193, expected 192TAC+: received corrupt data from serverWhat's the problem ?Thanks in advance

Hello,My scenerio is:1- MS IAS Radius1- Cisco 3560 24PS -s w/ 12.2(25)SEB IOSUsing 802.1x Port Security w/Windows XP Supplicant or IP Phone with Embedded EAP/MD5 Supplicant.Problem,After configuring the Switch/Port and IAS per supporting Cisco and MS...

I am currently using 8021x mac authentication bypass to authenticate client machines against active directory using IAS. I have also implemented dynamic VLAN assignment. Everything works great. The problem is that the username/password combination (w...

I'm trying to migrate an ACS for Win (v4.0.1.27) to ACS SE (v4.0.1.42) but it fails as the versions are different.Does anyone know if an upgrade for ACS for Win to 4.0.1.42 exists? Or if a distribution image of ACS SE 4.0.1.27?

Hi,I am currently in the middle of installing CiscoSecure ACS 3.3.16 onto Windows Server 2003 for the first time.I am getting the error External DB account Restriction each time a client tries to authenticate.....Is there anything I should look out f...

Hi All,Is it possible to create an LDAP database configuration and the related db group mapping via RDBMS on ACS windows version (Release 4.0(1) Build 27)?What I'm trying to do is maintaing the ACS configuration dynamically up to date with an externa...