Network Access Control

Good Morning Folks;Below is the output from the show aaa-servers from my asa5540. Notice the status "failed". When the status is thus (on both aaa servers) noone can login the the VPN on the ASA5540. I've checked the duplex / speed etc on the ports f...

I'm deploy a 802.1x NAC solution. Users authenticate ok but the VLAN is not assigned to the port. The RADIUS server send the attributes to the NAD (switch 3560). I see the following lines in the radius debug output:02:49:08: RADIUS: Received from id ...

Hi guys,I am trying to assign a vlan to the fa 0 - 3 interfaces via dot1x. Im already successfully using this feature on a 6500, a few 2970 and a few 2940. But the 871 seems to be a little different. Im running IOS 12.4(11)T on the 871. When a host i...

Need inputs on to do telnet to the ACS from a L3 6513 switch? Am trying to telnet from 6513 from where the traffic passes through a FWSM before hitting the ACS. Am able to see hitcount on the FWSM too.

I have been reviewing the ACS 4.0 documentation and want to know if there are any options available for synchronizing the DB using ODBC on the Solution Engine. Looking for something other than FTP, if available.

Is there away to find the shared secret of the primary ACS for replication. The primary was installed several months ago, and no one know the secret password, and I cannot get the replication to occur. I keep receiving shared_secret mismatch.

Hi,I'm configuring AAA for 4510 switch.All other routers & switches(29xx) are working properly with AAA server.However for 4510 there is a problem in authentication neogotiation with AAA server.Below is AAA config and debug aaa new-modelaaa authentic...

Hi, I have run into a problem with my VPN concentrator. I was setting up AAA on it this morning and after configuring it ,I cannot get back into the web interface. It is version 2.21 running on the concentrator. I cannot get a console session, nothin...

Hi,don't know whether this is the right forum, but i will try to ask my question in hope that somebody can give me an answer:I installed an ASA Security Appliance with WebVPN feature to connect to an internal Citrix Server farm. All authentication an...

Hi,Any one can help...I have set up AAA on my network.aaa authentication login default group tacacs+ group security localaaa authorization exec default group tacacs+ group security localaaa accounting exec default start-stop group tacacs+ group secur...

Hi,Iam ussing ACS evaluation version 4.0. We are not able to authenticate and authorize ussing PIX firewall (Version 6.3(5)) with TACACS+ server. I request your help in configuring PIX and ACS server. Please send me the sample configuration of PIX an...

Hi,I would like to configure ACS 4.0 to authtenticate users with Novell generic LDAP, but I am encountering some troubles. I don't understand some fields in Common LDAP configuration page like User ObjectType, UserObjectClass,GroupAttributName, etc.....

Sooner or later, i have to deploy a ACS4.0 appliance using a LDAP external DB.I want to know what should i prepare and check for this deployment?thanks

Hi,Can I configure Cisco ACS Appliance 3.3 to send logs to different remote agents which are not Cisco, for example Envision appliance.Regards,Ejaz

We currently have two instances of ACS 3.1 running on two Windows 2000 Domain Controllers. One instance is read only (changes don't replicate) Does it matter which instance I upgrade first? I think I should update the primary instance first.Once I up...