Network Access Control

Network administrators currently have ACS 3.3 deployed in production. I need to work on a AAA prototype with ACS. I'd prefer to use ACS 4.0 since it is the latest version and it is available for a 90-day trial in which I could use in my prototype and...

Cisco3550T24 is configured for Radius MAC authentication. But when a user connects to that port, it gets authenticated without radius Server. No authentication request is passed to Radius Server, and the user gets connected. Why the radius server is ...

Is it true that ACS uses SQL as its underlying database to save configuration and user data? If so, how come ACS doesn't prompt me for the SQL setup or have a SQL server as a prerequisite on the server? I also don't see any 'SQL service' on my ACS 4 ...

I'm currently setting up a CiscoSecure ACS 4.0 using TACACS+. I want to set the login up so when I login into a switch/router I automaticly login into the enable mode at the same time. Is this possiable??I've used other TACACS+ servers that have the ...

Can I import database with user passwords and settings ?

I hope this is in the proper forum. I am in the process of finding a solution for needing Radius authentication support for WebVPN/SSLVPN. There seem to ba a lot of options in the market (Windows -vs- Linux) as well as Cisco's ACS product. Is there a...

Hi All,We are looking into the possibility of implementing tacacs for enable access. Currently, we are using tacacs for login access and enable secret for enable access.I want to understand the advantages of using tacacs vs. enable secret.Also, is it...

i am a bit struggling with how to configure aaa local command authorization, i am not getting any material also for configuring it. Please tell me how to configure aaa local command authorization.. or possible give me some useful links for that..

I'm investigating implementing 802.1X for authenication on our network. Our primary access switch for users is the 3550. It appears straight forward however I have a question. How do you deal with software pushes to devices on the network where the u...

Hi,Is it possible to create a group that can give access to certain commands only ? Can these allowed commands be added, removed from that group. For example user ISDN_test will be made a member of a group ISDN and in ISDN we will specify all some co...

Hi guys,what command can i use to turn on command accounting in pix like it is possible in the IOS.i need every command typed to be logged on the ACS server.

Hello!I have CISCO 5200 with the following config:aaa accounting delay-startaaa accounting update periodic 5aaa accounting network default start-stop radiusAlso, I have radius server (freeradius) connected with SQL database.Alive-packets (from cisco)...

When TACACS server is not reachable router is not allowing the local password to login using ssh. Router's SSH debug says authentication is successful but ssh client gets % Authorization failed meassage and disconnects.kindly see below debug output a...