Network Access Control

Hi NetPro,Currently, i am facing some problem which is Firewall Authenticate with Cisco ACS. i've added the command "aaa-server AuthInbound protocol tacacs+" and " aaa-server AuthInbound (outside) host 172.17.xxx.xxx cisco timeout 5 "but, still cant ...

Hello,Is there anyway to assign Polies like 'Access Control List' to user basis instead or IP base? Thank you

I currently have in place CS ACS Solution Engine v3.3.3 and the Remote Agent is installed on Windows Server 2003. I'm using a lab environment to test Authentication to network switches and routers using ACS as Radius with Windows A/D as the backend....

It's possible create downloadable ACL in ACS 3.3 to restrict PEAP users access?AP Ios version is 12.3(4)JA.Thank YouLaura

Hi,Got a server running ACS v3.3 talking to a SecurID ACE server. When I set a user up to use SecurID, ACS always reports "CS user unknown" - when the user is plainly in the database. If I change user back to use Internal auth - it works a treat. If ...

Hello Guyz,i am having issues with my tacacs server. We implemented AAA using linux based tacacs on our 35 around routers and swicthes. On our few Cisco 3700 series routers AAA doesent seems to work. It asks for username/password and then fall back t...

Is it possible to have a backway into the PIX should the AAA server fail ie Console port access?Currrntly we use AAA authentication, authorization and accounting with out Tacacs server. Pix configured as follows:aaa-server TACACS+ protocol tacacs+aa...

I'm trying to configure my devices to use shell command authorization sets located on my ACS box. I want users that are members of a specific group to only be allowed to certain commands (ex. show). I'm pretty sure my ACS box is setup correctly, but...

Hi,I'm currently testing with Cisco's SDM interface combined with Cisco ACS authentication using rsa secureid. Tests without the rsa securid, just a username/pass combination all works well, however combining the securid, sdm keeps popping back up. C...

Hello. We know about the ipsec:inacl attribute for configuring split-tunneling for a VPN group, but AFAWK you must define the ACL in the local configuration of the router. Is it possible to define the ACL in the RADIUS server instead? How? By the way...

I have 802.1x configured with PEAP and vlan assignment using the MS supplicant. I have hardcoded Machine Auth because Remote Desktop does not work with User Auth. (see my other posts) I have figured out how to change the Microsoft supplicant to PEAP...

We have a 3015 VPN Concentrator and would like to begin using token authentication. Specifically CryptoCard tokens. I know some organizations are using the PIX with CryptoCards, but we already have the 3015. Is it possible to enable token access on i...

Hello,Can i use authentication 802.1x for assigning vlan to the end user without using Cisco URTThanks

Anyone care to mention what works well and what doesn't for alternatives to the default enable/exec password scheme in IOS? I've got RADIUS authentication working on an AP1200, and am thinking of using it elsewhere, but I'm concerned about what happ...