Network Access Control

Dear Sir,1. If ACS local database not found, ACS will attempted to authenticated with external database ( if configured ), and then created that user in ACS local database if authenticated succcess. Can we disable the auto create user function? 2. If...

Hi I have a pair of PIX 535's running 7.04 with ASDM 5.0(1) I have used the ASDM wizard which has setup three roles 1) ASDM_Admin (priv 15),2) ASDM_Readonly (priv 5)3) ASDM_Monitor (priv 3)The PIX now has these user accounts in the local database and...

Hello,I am currently deploying 802.1x using following devices:XP - HP Procurve - Cisco ACS - Active DirectoryI am able to forward dynamic vlan id to employe and consultant after authentication.Bit how to deal with big site having a large number of pe...

Win2003 active directory.I am planning to create a Windows security group (global) "WirelessUsers" and a group named "VPNUsers". Then I would need to go to ACS 3.3 and need to configure mapping to allow such groups to access wireless and VPN respecti...

Hi,I've just discovered an issue when trying to use MSFT supplicant and Cisco 802.1x accounting. This makes 802.1x accounting completely unusable.Facts:1. MSFT supplicant does not send EAPOL-Logoff messages and there's no way to enable this (btw. Aeg...

Hi,Can anyone confirm that command authorization works as advertised on the ASA platform? i.e. is anyone doing this successfully at the moment?We've no problems with authentication, accounting, NAR's, etc - just the authorization set's.thanks,Andrew.

Hi,I have a curious problem about radius authentication. I have a 4503 with radius enabled authenticating on ACS 4.0. For while I don?t enabled dot1x. I?m testing authentication throught telnet. I have a ACS 3.3 and a 4.0 and the problem happens with...

PIX515E (6.3.4). Attempting to request a certificate from a remote CA server. Entered this in the config... ca identity somewhere.net 54.254.254.54:81/cgi-bin ca configure somewhere.net ca 2 20 crloptionalWhen running the command 'ca authenticate som...

I am using a wireless setupAironet 1100, ACS 4.0, 3rd party Client adapterI am able to connect to my wireless network by keying in username&pass created on the ACS user setup. Also by using a self signed certificate from the ACS.Doubts: In ACS logs -...

Is it possible to restrict a user to a specific ip address via the acs appliance, running v3.3? I have a user that I want to allow but only want him sourcing from one address.

Attempting to configure SSL communications between ACS 3.2 and Oracle 10G OID LDAP. Anyone have pointers to any examples for this particular environment.We have verified SSL works via an LDAP browser but cannot get ACS to communicate via SSL. We have...

Hi there,After going through some topics and trying everything I could fine I am relaying on you all to help me further before I loose my mind. I have an Access Point for R&D and have configured several items for AAA, such as login in through the tel...

aaa authentication login default group tacacs+ localaaa authentication login TACACS group tacacs+ enableline vty 0 4login authentication TACACSBase on the above configuration, I would assume if a user is telnet using one of the 5 vty lines then he/sh...

AD 2000 Domain, ACS appliance (running 3.3.1), remote agent on the Certificate authority. setup PEAP per instructions. When i try to login with a user on a desktop, it errors out. This is the error message i see in the RemoteAgent logsCSWinAgent 02/0...

I am testing 802.1x with dynamic vlan assignment on an ACS 3.3.3 for windows with a cat 3750.When a new users logs into the machine, ACS is able to poll the AD for the users credentials, however the users gets placed int the default group, rather tha...