Network Access Control

Ihave two queries , when APSEC AH Protocol used IP Packet is expanded/added during simole VPN session two modesHow much Ip Packet is expanded/added1. IP Packet expanded in transport mode2. IP Packet expanded in tunnel mode

Dear Alli have Cisco Secure ACS solution engine with v3.3, and i want to add external database to it ( Active directory ) i tryed many way and i follow the Dc but unfortunaly it didnt adddany body could help me step by step and he port i ahve to conf...

When ISAKMP begins in ike phase 1 to look for an ISAKMP policy that is same on both peers. I have two queries1. Which peer will send all their policies to match?2. Which peer will try to find a match? calling peer,called peer, in both cases

My query is that who much IP Pachet isadded/expanded in following two case.1. ESP IN TRANSPORT MODE.2. ESP IN TUNNEL MODE

HI I have a problem with my configuration. can someone help.I have a freeradius, pix and vpn client and i install the radius to authenticate the vpn users. i tested the authentication from the pix to the radius OK but if I want the vpn user to authen...

Hi everyone!Equipments involved:Cisco ACS 3.3 ApplianceMicrosoft Active DirectoryAironet 1200 APIBM Thinkpad T42, WinXP SP2Authentication used:WPA/TKIP/PEAPSupplicants:Thinkvantage (4.12)Odyssey Client 4.32Windows PEAP SupplicantProblem:How to push n...

Hi,I have recently implemented ACS 4.0 for autentication of remote access users. Our helpdesk have found a slightly niggly issue that I am wondering if anyone knows how rectify.Issue below:-A user is created in ACS who is authenticating against the A...

HelloDoes anyone know if there is any effect when Cisco ACS service pack is upgraded for version 2 to 4 on windows 2000.This is especially if users authenticates through Active Directory

I try to establish a link to an external database by LDAP SSLI put all information in the common LDAP configuration, I set the port to 636, Checkmark are on LDAPv3 and Use SecureAuthentificationI put the path of my .db fileBut when I try to map ACS g...

I'm in the process of evalutating RSA SecureID and Radius server verision 6.1 In order for my new VPN Client to use RSA for Radius Authentication. I have to move the order of RSA Authentication server to the top of the list of authentication servers...

Hi all,The customer have a Win 2003 domain (A) and a trust established with another Win2003 domain (B). Domain A is the one with the CiscoSecure software ( ACS v3.3.3 ). These two domains are both pure win2003 mode.But when trying to "add mappings" f...

There is small branch which is connected to central place. Branch is connected by DSL and PIX 501 using VPN.Now i need to auth local users and give them access to corpo network (NAC will be great but just 802.1x is also ok) and some guests (laptops w...

Hi guys, is it possible to set up 2 factor authentication using a tacacs+ server in the pix firewall? only want to use a tacacs+ server using aaa on the pix.

In prev. IOS 12.2(17d)SXB10 e.g. a C6k had a syslog MSG for a failed SSH Authentication(%SSH-5-SSH2_USERAUTH:)This MSG is no longer present(in 12.2(18)SXF). On a 3750 e.g. there is a command "ip ssh logging event", which brings me back this log msg. ...