Network Access Control

hi,i have a server acs 3.2 integrated with windows 2003(Active Directory) just to check usernames in wireless network.in AD have a policy when user make incorrect login for 3 times the account is locked, in ACS Server this parameter stay configured i...

hi,I have a question regarding aaa, pix and nated networks.I have no plans or a network yet but I'm just wondering and putting all this on paper.so WHAT IF, I have a webserver that is protected by a firewall 515e. the 515e uses aaa to authenticate us...

Hi Alli am using Cisco 3640 router.i have a problem with radius server.i did basic aaa configuration but i still have problem...the problem is 01:30:39: RADIUS: Initial Transmit id 6 171.68.118.115:1645, Access-Request, Len 6701:30:39: Attri...

I am running tac_plus on linux. I have basic configs in place and operating, but every time I telnet into a device I am presented with the User Exec prompt (router>) and I have to issue the enable command. I want to get set up so that I go straight t...

here's a good one...so within our LAN there is a secured network isolated by PIXs. Most networking devices in our LAN including these PIXs were using a csacs server on the LAN for authentication while additional firewalls and other devices inside th...

Hi all,I've the following question: is it possible to set up a replication between 2 server running the same version of ACS, but with 1 server behind a PIX running static NAT (private IP address of one server is statically mapped to a public address)...

Can anyone assist? For some reason, my ACS server displays an incorrect number of users for a group. It appears that deleted users are being counted. How can I get the correct number to be displayed?

Radius Attribute 31 (Calling-station-id) is not send by 7206!----------------------------------------------7206-NPE-G1 with Version 12.3(10b) (c7200-is-mz.123-10b.bin)Is working as a PPPoE terminator for DSLAMsOf course we're expecting all standard ...

HiI am trying to configure Network access restriction. I want that user should do only telnet in the router from any ip address. I am selecting port 23 in the option but it is not working.I have to give * in the port then only it works.Do we need to ...

Has anyone sucessfully implement command authorization on a PIX or FWSM?My goal is to have three users (admin,backup,readonly) where admin user has all rights, the backup user can only issue the write net command, and the readonly can only do show co...

When i add a user, give him a password (change on logon) it works great. One of the problems is that when i get connected to a device in a other subnet there is also the question to change the password. Also afhter a day i can not login at all, need...

Greetings,I have a browser that has to run an applet.the applet basically does a telnet to a server.so broswer port 80(http) and the applet port 23 (telnet)with aaa (csacs) can I force an authentication only on port 80(http) and if it's ok let port 2...

I have 3 NDG's and 3 user groups. The NDG's are core devies, edge devices and AccessPoints. The user groups are End users, Guest users, Lan users and core users.I want to give the core users access to all network devices and access to wireless via ...

Hi ,Is it possibole to authinticate identity in LAN using signature ?Regards,

Is there an option for 802.1X wired network to put any un-authenticated user onto the guest VLAN instead of no access? Thanks.