Network Access Control

I am modifying a TCL 2.0 script and I am trying to issue a "aaa authorize" command that will include the DNIS (Called-station-id). The Cisco sends the authorize request but it doesnt have the DNIS in it. It does have Calling-station-id and other AVs....

Hi, I am trying to configure a downloadble ACL(onto a Cisco Router with IOS ver 12.1 ) from a ACS 3.2 server. The authentication part goes well but then neither the authorization nor the downloadable ACL works. I am new to ACS configuration , Any go...

Hello, Can anyone, please explain to me why, when typing the above mentioned command (loggin in with a privilege level 14), I just get a partial output.The router has the following config:aaa authentication login default group tacacs+ localaaa authen...

Hi,I would like to generate hundreds of login/password and import them into ACS 3.2 databaseHow it can be done ?thanks

Hi,If you install ACS on a windows member server you have to create a user in the domain for the service that authenticates to AD.Is it possible that anyone tries to hack this account and the account becomes locked because of that ? In that case ACS ...

Hello, is it a size limit for the accountactions.csv ? 20 MB file size is acceptable ?Thank you in advanceByeRenato

Hi,I have a router configured with TACACS+ and SSH. I'm SSH from a workstation to the router. The router will authenticate with the TACACS server which located across a WAN. Will the traffic between the router to the server encrypted as well?

hi there, company is begining to roll out tacacs+ for network devices. We like the windows versions features (mostly LDAP support) but we're a pure unix shop.Has anyone ever found any unix version of a tacacs+ server that supports ldap?

I am using user authentication to validate users on the network. I am running ACS 3.2 on a Windows 2000 server. The customer is running Novell 6.1. I have set up an external database within ACS. This is a generic LDAP configuration. The problem i...

hi, i have enabled Pdm on my Pix 535 for my senior it security manager, in order for him to see what's going on. i created a username with level 1, but the problem is that when i log to the pix with that username, i am able to upgrade the level from ...

Hi:I want to use something like "command accountig" in pix 525; I mean I want to know what commands was executed or typed by administrator.Somebody knows if it is possible in PIX? My pix version is 6.3.3.Thank you.

ACS 3.3.1; configuration:aaa accounting commands 15 default start-stop group tacacs+aaa accounting connection default start-stop group tacacs+On the ACS the log under "TACACS+ accounting" isn't show session duration for logged-in user.any input is ve...

I've been seeing the following error fill our ACS failed attempts log sourced from one of of VPN concentrators. How do I go about finding the offender?Bad request from NAS

Pix 6.3(3) is only logging RADIUS info to ACS 3.2. Unfortunately, this does not log the internal IP address that is assigned to VPN user. Is there some way I can configure RADIUS or TACACS on Pix to send that info?

How to log failed SSH attempts to syslog server?We are using TACACS+, so getting log in ACS server but we want them to log into syslog server.Thanks a lot...