Network Access Control

ACS 3.3.x. What is the diff between setting up ACS to use AD info via Ldap or Window database? All I want is for ACS to pass groups, users and password auth info to certain devices. Did a search but not much turned up. the userguide isn't full of s...

Is it possible to do two factor authentication on a Cisco router for VPN access? I want to use a Cisco 1841 for VPN access, and want to use some additional authentication over username/password. Can this be done?

Can a Cisco device be configured to ignore certain attributes sent from Radius? The reason I ask is because I have to include some attributes that are necessary on other devices, but if Cisco sees them, it will cause problems. To be specific, I'd lik...

Hi,I have been trying to use Active Directory of Windows 2003 Domain Controller for Machine Authentication for my workstations through Cisco ACS. I have not been able to get windows user database in the list of users in Cisco ACS. My version of Cisco...

HiPlease find attached text file that contains the output of debug aaa on a Cisco AS5300.Is it a normal that the debug output for AAA/AUTHOR/IPCP is repeated thrice for a single user who is trying to connect?Thanks in advance for your reply.Anup

hey all, I have attempted to configure our 800 series router to accept client to router vpns into our network. However the clients just don’t connect, no error message either. I am a little lost what to do, any help would be Massively appreciate as...

Pls i have been trying to configure a backup acs server to authenticate users when the primary acs fails. The backup server has been installed and the replication process goes on but when the primary server is down, the secondary server doesn't authe...

Im using ACS 3.3 and enabled looging for all.For some days CSV log file were getting generated everyday as per the config.But after 1 sept.all looging is happeniing in same file and no new CSV files are getting generated.can someone help.

Does an ACS administrator by default have full rights to every device it manages?I thought ACS administator accounts and user accounts were different. I have an acs admin account called admin_1. then i created another user account called admin_1 (for...

Wanted some feedback on what people do with 802.1x and host accounts. I am testing PEAP with our setup and i need to put the machine accounts in a separate group (to allow new logons and for pushing/pulling application and such).I've noticed that new...

Hello,In page 610 of "CCIE practical studies: Security" for Dimetry Bokotey:"when configuring aaa authorization auth-proxy, ensure that aaa authorization isn't enabled as well......"I think this is wrong argument. In fact, you should enable the exec ...

I have just inherited a corp network that uses a PIX 515e at each of three sites to create site-to-site VPN tunnels. This is working fine. I need to setup remote VPN access for individual users using the PIX at our main office. Is it possible to use ...

I have just inherited a corp network that uses a PIX 515e at each of three sites to create site-to-site VPN tunnels. This is working fine. I need to setup remote VPN access for individual users using the PIX at our main office. Is it possible to use ...