Network Access Control

I would like to get a text list of the defined users so I work with csutil.exe -d. This tool writes a dump.txt file that includes deleted users (I don't see them via the web interface). I tested csutil -s to "make database smaller by removing delet...

Running Windows 2000 Ad environment. Have Cisco ACS 3.1 installed. Users in AD can dial into network and ACS uses the Windows 2000 AD user database.We have recently set up a domain password policy. Some AD user accounts have "user must change passwor...

Hi,Currently we are using PIX 525 with ACS server for user authentication once the user (workstation) got authenticated PIX maintain the information for 24 hrs (user will be prompted to authenticate after 24 hrs). Average CPU utilization is 2%Now we ...

Hi,Having problem with our VPN. Setup is as follows:Client has Cisco VPN Client 4.02(D) and is connecting to our PiX 515. This is turn uses IAS on Windows 2003 Server to authenticate. According to the IAS logs, the user is athenticating fine. However...

Hi all. We are currently implementing a video solution. There are some rewuirements from Video server's site that it should be able to Query the Radius server for a Username to IP address mapping (provided that the IP address assignment is done dynam...

Hi all...today my network become larger. did any software or hardware become user manager like : User A Connect to network and get Vlan A, can access aplication A,B,C, also connect to internet. User B connect to network and get Vlan B, access aplicat...

Hello,I'm running the latest Cisco 3005 code 4.1.7I've been attempting to configure Microsoft Active Directory authentication on a Cisco 3005 concentrator and appear to be stuck. I have successfully configured an Active Directory/Kerberos server in C...

I have been using the ACS 3.2 for some time now and use it to authenticate users on all of my switches and routers. However, I am now trying to setup an aironet 1200 access point to authenticate to the ACS with radius and find myself stumped as to w...

Hi,in an environment where we have a catalyst Switch, an ACS Server and a Win2000 or XP Client, is it possible to set up 802.1x machine authentication without client being part of a ADS ?is it possible to do machine authentication only with certifica...

I'm just looking for some clarification here - as far as I know Cisco doesn't support what I want to do (although you can do it on other switches like Foundrys) but I'm still unsure and hopefully somebody here can give me a definite answer.What I'd l...

Hi, Anyone knows how to export AAA clients from ACS into a TXT file. I know ACS can do it for users but I can't the way for AAA clients.

Hello,I tried to setting rsa secured with remote access dial-in service on cisco 2600 box. Everything works well except when token in new pin or next token mode. The dial-up client can not enter second passcode, do not have second pop-up window, so a...

Hi.How i can limit user profile level to do only some kind of command with PDM and CLI?I need to use AAA but how?Thx.

I'm trying to load Vendor Specific VSAs into my ACS SE 3.3 box, using a csv file. I've created the following file, which I think should work, however it doesn't. I place the file in an ftp root directory, configure my ACS device to grab it from the...

Hello,I have an ACS serving as AAA server for a C3620 router serving as RAS. This ACS is giving the same IP address to different clients. Here you have the output of the 'sh users'where you can see this problem.R3620CTP01#sh users Line User ...