Network Access Control

aaa authentication login default group tacacs+ localaaa authentication login TACACS group tacacs+ enableline vty 0 4login authentication TACACSBase on the above configuration, I would assume if a user is telnet using one of the 5 vty lines then he/sh...

AD 2000 Domain, ACS appliance (running 3.3.1), remote agent on the Certificate authority. setup PEAP per instructions. When i try to login with a user on a desktop, it errors out. This is the error message i see in the RemoteAgent logsCSWinAgent 02/0...

I am testing 802.1x with dynamic vlan assignment on an ACS 3.3.3 for windows with a cat 3750.When a new users logs into the machine, ACS is able to poll the AD for the users credentials, however the users gets placed int the default group, rather tha...

How do I import from an external database to ACS, case at hand installing in a college environment, will be using the acs for authentication for the CAS 3.5. So I need to generate a user list on the ACS from the database of the enrollments, as best I...

Hi,Whenever I login using "user1" I can successfully authenticate however when I ussue the show run for user1. The only thing that I can see are the following:R4#show runBuilding configuration...Current configuration : 13 bytes!!!!endR4#I have put th...

I have ACS v3.3 installed on a 2003 DC server, I noticed that everytime I make a change(configuration changes that require to stop and start ACS services).The services will stop but will not start again. I will have to reboot the server to start the ...

I've got a couple of different platforms of PIX, 535s and FWSMs mainly all running the latest code. I have them all configured similarly with regards to AAA via tacacs:aaa-server TACACS protocol tacacs+aaa-server TACACS host <Removed> key <removed>us...

Hi all.I am trying to set up 802.1x authentication using Windows XP Supplicant, Catalyst 2950 and FreeRadius as radius server.I can login correctly so I have the port in Authorized mode, but I can't download the vlan id through the radius server.Read...

Hello all,I am having a problem with radius authentication for vpn clients. It seems as though the router (871w, adv.security 12.4) is not sending authentication requests to the radius server, a Win2k3 member server running IAS.Below is a snip of the...

Does an ACS solution engine loaded with ACS 3.3.2 software respond to pings from another machine? Or does it block such requests? Our appliance is working fine but we don't get it ping'ed from outside.Thanks. Thomas

Hello all. Hopefully, this will prove to be an easy question with a simple answer!I want to configure local username/passwords on my router, with different privilege levels. For example username admin is only allowed to access privilege level 1 comma...

Hi,I have prepaid debit card application which is being tested with ACS and it is failing authentication. What is the best way to check what exactly is the password reaching the radius, so I could configure password accordingly.I appreciate any help ...

I just implemented ACS 3.3 for our network. We have one third party user who will be logging in remotely. Is it possible for ACS to send an immediate notification when they do? I know I can review the logs, but I would like to receive an alert anytim...

Trying to get ACS 3.1 to work with Check Point Connectra as a Radius server. Does ACS 3.1 support PAP by default and how do you configure it?Thanks,

Hi,I can't seem to get my NAM-1 (6509) running software v3.4, to accept logins using CIsco ACS 4.0. All of my other cisco devices have been working fine with this ACS for over a year.The ACS Failed Attempts Log shows: "key mismatch" in the Authentica...