Network Access Control

Hi,I've just discovered an issue when trying to use MSFT supplicant and Cisco 802.1x accounting. This makes 802.1x accounting completely unusable.Facts:1. MSFT supplicant does not send EAPOL-Logoff messages and there's no way to enable this (btw. Aeg...

Hi,Can anyone confirm that command authorization works as advertised on the ASA platform? i.e. is anyone doing this successfully at the moment?We've no problems with authentication, accounting, NAR's, etc - just the authorization set's.thanks,Andrew.

Hi,I have a curious problem about radius authentication. I have a 4503 with radius enabled authenticating on ACS 4.0. For while I don?t enabled dot1x. I?m testing authentication throught telnet. I have a ACS 3.3 and a 4.0 and the problem happens with...

PIX515E (6.3.4). Attempting to request a certificate from a remote CA server. Entered this in the config... ca identity somewhere.net 54.254.254.54:81/cgi-bin ca configure somewhere.net ca 2 20 crloptionalWhen running the command 'ca authenticate som...

I am using a wireless setupAironet 1100, ACS 4.0, 3rd party Client adapterI am able to connect to my wireless network by keying in username&pass created on the ACS user setup. Also by using a self signed certificate from the ACS.Doubts: In ACS logs -...

Is it possible to restrict a user to a specific ip address via the acs appliance, running v3.3? I have a user that I want to allow but only want him sourcing from one address.

Attempting to configure SSL communications between ACS 3.2 and Oracle 10G OID LDAP. Anyone have pointers to any examples for this particular environment.We have verified SSL works via an LDAP browser but cannot get ACS to communicate via SSL. We have...

Hi there,After going through some topics and trying everything I could fine I am relaying on you all to help me further before I loose my mind. I have an Access Point for R&D and have configured several items for AAA, such as login in through the tel...

aaa authentication login default group tacacs+ localaaa authentication login TACACS group tacacs+ enableline vty 0 4login authentication TACACSBase on the above configuration, I would assume if a user is telnet using one of the 5 vty lines then he/sh...

AD 2000 Domain, ACS appliance (running 3.3.1), remote agent on the Certificate authority. setup PEAP per instructions. When i try to login with a user on a desktop, it errors out. This is the error message i see in the RemoteAgent logsCSWinAgent 02/0...

I am testing 802.1x with dynamic vlan assignment on an ACS 3.3.3 for windows with a cat 3750.When a new users logs into the machine, ACS is able to poll the AD for the users credentials, however the users gets placed int the default group, rather tha...

How do I import from an external database to ACS, case at hand installing in a college environment, will be using the acs for authentication for the CAS 3.5. So I need to generate a user list on the ACS from the database of the enrollments, as best I...

Hi,Whenever I login using "user1" I can successfully authenticate however when I ussue the show run for user1. The only thing that I can see are the following:R4#show runBuilding configuration...Current configuration : 13 bytes!!!!endR4#I have put th...

I have ACS v3.3 installed on a 2003 DC server, I noticed that everytime I make a change(configuration changes that require to stop and start ACS services).The services will stop but will not start again. I will have to reboot the server to start the ...

I've got a couple of different platforms of PIX, 535s and FWSMs mainly all running the latest code. I have them all configured similarly with regards to AAA via tacacs:aaa-server TACACS protocol tacacs+aaa-server TACACS host <Removed> key <removed>us...