Network Access Control

I would like to configure our routers to use our ACS server for authentication and enable authorization for all telnet access but not use the ACS when connected to the console port. I was able to get the router configured so that console username and...

Good Day to you all,I am trying to configure aaa accounting through a natted device to a ACS 4.0 server. the information is logged ok but is logged as the device that is performing the natting. is there a way to configure aaa accounting to show the a...

I'm trying to assigned a privilege level on a Cisco router via Radius. I'm using the Cisco Secure ACS (Windows 2K).I have set the privilege level to 15. But when I telnet to the router, I always get the router> prompt instead of the router# prompt.Ho...

Hi, I tried searching this forum, and did not find information specific to my situation, but I apologize if this has previously been addressed.What I am looking to do:Local user configured on switch (Admin) should be placed into Exec mode upon initia...

What I am trying to configure is a way to have 4 groups that get assigned different IP addressing when they authenicate against windows domain. Should this be done with the domain group mappings configuration, where I have a domain group, tie this to...

Does Cisco PIX - VPN supports/extensible dual factor authentication solution, e.g. token, etc?

I have been informed that I am to move the ACS 3.3 from one server to another. So I have some basic questions. 1) I am going to do a fresh install and then would like to copy the existing files to the new server.2) If I can copy all of the files (I f...

I am integrating ACS with windows ADS for dot1x authentication. I m sucesfully able to get the requirement. But I have only one ACS. If my acs fails all my users will not be able to login into the network. Is there a way I can make the user get only ...

I have remote users that connect to the corporate network via vpn terminating on a VPN3k at the primary site. These users are authenticated and given IP addresses by Cisco Secure ACS. There is a backup site where the backup ACS is deployed. I would l...

I have two groups defined in my CiscoSecure ACS server. Network Admins are mapped to the Network Admins NT group with no NARs. Information Protection is mapped to the NT group Information Protection with limited access to a few network devices using ...

I am trying to do a bulk import from a text file of some NASs and those NASs have multiple IPs. The documentation says to use the pipe (|) command, but every combonation of the pipe command always seems to return a syntax error. what is the exact uti...

Dear All, I was reading my NAT Design Paper, because I am going to Implement NAT in My Company.Now, I want to ask you for only the Process of Static NAT , to allow External Users ? on internet side ? to ? access a specific server inside my LAN.Which ...

Hi Guy,Please clear some of my doubts for tacacs client configuration.#aaa authentication login default group tacacs+ localwhat will be diffrence between both configuration.#aaa authentication login myway tacacs+ local!#aaa authentication login defau...

Hello:I have a LDAP server configured and authentication working just fine. My next goal is to provide SSL VPN services to some employees. Their Tunnel Group membership should depend upon their LDAP 'group' membership.For example, our LDAP administra...