Network Access Control

Hello,I am confused on aaa accounting. If I wish to account all commands and the levels I have configured are say 5 and 15, do I need to include level 0 in my aaa accounting commands?

I have a simple version question RE document 68840. There are pages of vulnerable versions explicitely listed. But I want to be sure that if a shorter version name is listed that another isn't included by default and not explicitly included.IE - 12.1...

Hi,I was wondering if there is a way for my authentication and authorization for the access to net equip, be tied to an OU in AD, so net admins can use their domain logins to make config changes. We are using Radius for AAA. Thanks for your help.

Trying to set up AAA on the PIX515e so I assign accounts with different privilege levels for access. I used aaa-model on my routers and it worked fine. I am stuck here. Any advice or direction is greatly welcome! TIA, Gary /

The first step of our NAC implementation would be to segment our network in two VLAN´s. One production network and one consultant network.Is it possible to check the Windows XP client´s active directory domain membership and segment them only based o...

Hi,I was wondering about logging and aaa accounting.I notice some networks will have a syslog server and a tacacs+ server with aaa accounting. Is it best practices on a security perspective to configure a router to use a syslog server and a tacacs+ s...

Hi, Does the feature “IKE Pre-Shared Keys Using a RADIUS Server for the Cisco Secure VPN Client” available in PIX 6.3(5) release? or it's only in IOS release? I'll appreciate if somebody can help me with this! It’s very important to us to implement t...

Hi all,I'm trying to configure both VPN client authentication and access to remote networks, but is this even possible?The configuration: Pix515E with swver 7.1(2). VPN software clients. Windows server2003 with IAS. Site-to-site VPN to remote network...

Hello,i have a little Problem, so I hope you can help me.I have an external Radius Server and an ASA5520 which submits the IP-address and the address of the DNA-Server to the registering client (with cisco-avpair = ip:addr=x.y.z.w)How can I submit th...

Hi I have to enble virtual-profile aaa in 7200vxr router but i have only two options: Router(config)#virtual-profile ? if-needed virtual-template I don't understand where is the problem? Any help please the version is: isco IOS Software, 7200 Softwar...

Hi,Can anyone help. i'm installing a cisco ACS webserver for UCP.After installation the users do not get the any display after entering their configured username and password. The url http://172.29.12.230/securecgi-bin/CSUserCGI.exe is displayed give...

when i tried to install SDM on cisco2611 router it is asking for username & password of level 15 so configured a local user of level 15 on the router & provided the same creditentials to SDM installer but the authentications fails can any body pls cl...

Dear there:Here I use MAC Authentication with a ACS in a Wireless LAN, but I didn't find any encryption options both in AP side and the client side. Is that the MAC Authentication doesn't support the Dynamic Encryption?so, with MAC Authentication on ...

Hi,I want to import NAS devices into ACS 3.3 and I want to use CSUtil.When I use the "ADD_NAS" command, is it possibile to import from file also the option like "Single Connect TACACS+ AAA Client" or "Log Update/Watchdog Packets from this AAA Client"...