Network Access Control

Hi, using a Cisco 7206VXR as PDSN with IOS 12.3(4) it does send within the accounting stop packet an attribute:Acct-Terminate-Cause = noneSince this is a non-standard, RFC value, the Radius does not send the response.Looking in the IS-835, the PDSN s...

Is it possible to use Microsift AD server , on inside ( region ) of PIX as AAA server for packets exiting PIX and going either to outside or to DMZ region.highly appreciate link on Cisco.com / Microsoft.com Thanx

Hi all, just finished configuring the CLI part of a brand new ACS 3.3 appliance, user and password work fine from the serial connection, but when trying to access the HTML part the user and/or password are not recognized.Has anyone come across someth...

Hi,I am trying to set up an authentication method whereby users can SSH to my Cisco kit in conjunction with RADIUS - This works fine.But i also have it set up that if they dont have a RADIUS/Windows account they can use normal telnet and authenticate...

I followed the instruction in below URLhttp://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00800e518a.shtmlBut its doesn't works for me.. Keys are all configured properly..Iam getting errors in Reports:In seconda...

Hello everyone. This is my first post so hopefully I will pose the question properly. Currently we have a 3550 running 12.1(20)EA1 and a Cisco Secure ACS 3.2(3) on a Windows 2000 server. I have configured 802.1x authentication using EAP-TLS with cert...

I am trying to authenticate users from a VPN Concentrator (3030) to our NT Domain. We are not running AD yet but we are required to use NTLMv2 authentication on the Domain.I want to use ACS4.0 to authenticate Radius w/Expiry from the VPN concentrato...

We have a catalyst 5509 running the old CatOS. I have everything with Tacacs set up correctly to log in but it won't pass through any login directly to enable mode. After I log in then I have to enter the enable password. All of our other routers wor...

Hello I have many user with need to access the network, I have a ASA5520 with version 4.0 and I configure different profiles by different users, exist many tunnel-group's and group-police's in the ASA.I need know if is posible create the tunnel-gr...

I hear its possible to let my vpn server use AD to authenticate its clients. Is this possible and where can i read about it?

Hi we've got an Cisco 7200 termination our incoming PPPoE Connection. That works quite well, but to localize the clients we would like to log via Radius the following parameters:client-mac-address[31]interface[157]Debugging the aaa process we got fol...

Hi, allMy ADSL system's using a ERX-700 (juniper) as a BRAS and 7206 for backup. Everything is alright except assigning name of pool to BRAS.ERX-700 use frame-pool attr to provide pool name instead of addr-pool attr as 7206. IOS can unsupport this at...

Hi GuysI've just upgrade your PIX 515E to pix 7.1. Seeing that version 7.x does not support pptp, I'm attempting to rollout the Cisco VPN client. During the vpn configuration it indicates that the can do AAA via LDAP. When I try to test the authe...

I am able to import client and group info but need to export to verify they are all there as i have migrated from unix to windows...thanks

Hi, Got a server running ACS v3.3 talking to a SecurID ACE server. When I set a user up to use SecurID, ACS always reports "CS user unknown" - when the user is plainly in the database. If I change user back to use Internal auth - it works a treat. If...