Network Access Control

I want to enable SSH on my Cisco 6509 on VTY 0 4. However, on VTY 0 3, I want to use RSA authentication, and on VTY 4, I want to use local authentication. (A script logs in with a static local username and password, and a script cannot utilize the ...

I want the network clients switch ports to be authenticated based on windows authentication. (801.x + ACS + Windows DC). Does any one have a documentation of implementing windows based network authentication?Thanks,yasemin.

I would like to know what I would need as far as an ACS server to allow and disallow people from connecting to the switches based on their mac address. I have a customer who has WYSIWYG terminals and cannot add any time of software for authentication...

Hi,Does anyone know if there are any support for EAP-TTLS in the upcoming release 4 of ACS? We have invested heavilly in ACS but now we really need EAP-TTLS support (both auth and proxing).CheersAnders NilssonUMDAC

Hi, is there some possibility to move some group mapping UP/DOWN in list of mapping? When i create some mapping it's at the end of list but i need to move this rule to another position in list becouse there is sequential system for matching rules..

Hi, we have two switches Catalyst 4000 version 12.2(18)EW1, with errors: %RADIUS-3-NOACCOUNTINGRESPONSE: Accounting message Start for session 00000113 failed to receive Accounting Response. Please, help!.Thanks!!

My currentvpn authentication for remote users (3005 VPN Concentrator) is to the Windows 2003 Active Directory. We want to separate the local network and remote access authentication and are looking for suggestions for improvement. I do not want to us...

Hi, using a Cisco 7206VXR as PDSN with IOS 12.3(4) it does send within the accounting stop packet an attribute:Acct-Terminate-Cause = noneSince this is a non-standard, RFC value, the Radius does not send the response.Looking in the IS-835, the PDSN s...

Is it possible to use Microsift AD server , on inside ( region ) of PIX as AAA server for packets exiting PIX and going either to outside or to DMZ region.highly appreciate link on Cisco.com / Microsoft.com Thanx

Hi all, just finished configuring the CLI part of a brand new ACS 3.3 appliance, user and password work fine from the serial connection, but when trying to access the HTML part the user and/or password are not recognized.Has anyone come across someth...

Hi,I am trying to set up an authentication method whereby users can SSH to my Cisco kit in conjunction with RADIUS - This works fine.But i also have it set up that if they dont have a RADIUS/Windows account they can use normal telnet and authenticate...

I followed the instruction in below URLhttp://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00800e518a.shtmlBut its doesn't works for me.. Keys are all configured properly..Iam getting errors in Reports:In seconda...

Hello everyone. This is my first post so hopefully I will pose the question properly. Currently we have a 3550 running 12.1(20)EA1 and a Cisco Secure ACS 3.2(3) on a Windows 2000 server. I have configured 802.1x authentication using EAP-TLS with cert...

I am trying to authenticate users from a VPN Concentrator (3030) to our NT Domain. We are not running AD yet but we are required to use NTLMv2 authentication on the Domain.I want to use ACS4.0 to authenticate Radius w/Expiry from the VPN concentrato...

We have a catalyst 5509 running the old CatOS. I have everything with Tacacs set up correctly to log in but it won't pass through any login directly to enable mode. After I log in then I have to enter the enable password. All of our other routers wor...