Network Access Control

Hello all, My situation is the following. I have a Windows VPN client 4.0.1 trying to authenticate with digital certificates to a 3005 concentrator. I have installed the CA on both, identity certificate on the 3005 as well. I enrolled a certificate w...

HI,We have a Cisco ACS 3.0 configured for tacacs which is integrated with windows 2000 domain for user authentication.There are few users who are able to authenticate but few users are not able to connect.The configuration on both ACS and Windows is ...

I have printers connected to a Cisco 2500 and we use reverse telnet for printing to the lines. How do I configure AAA so that it doesn't go to the TACACS server for authentication? I just want the TACACS on the vty, console and aux lines.Thx

Hi all,our domain suffix is pippo.pluto.com (so pluto is the root and pippo is the child).There aren't any security permission setted.My ACS is on domain acs.pippo.pluto.com.I'm trying to configure on ACS the Database Group Mappings using as external...

Hi,We are usin ACS3.2 on W2000 server.Until there, we only had AAA client usin Radius protocol , and all was workin properly.Yesterday, we added PIX525 as aaa client usin TACACS+ (for command authorization).And now we have a bug with group setup:when...

I have Cisco ACS 3.2 appliance build 20.I upload VSA for Alcatel Devices and it didn't works.Now I want to delete this VSA and remove AccountActions.csv from the appliance. i tries the Action 351 in the AccountActions and it didn’t work.How can I rem...

Hi,after installing an ACS appliance, and reading the manual, I still wonder about some details. First, a few days after installing the ACS, suddenly I wasunable to log in via the web interface. I got the login page, but the login/password combinatio...

I am doing some testing with a new Windows 2003 server acting as domain controller. When a client on the inside of the PIX tries to log on to the Win 2003 server, logon fails. A sniffer trace shows the client issues a udp kerberos request for initi...

Does anyone else have their ACS conversing with an OID server for Generic LDAP authentication of Users.We can't seem to get this working at all. Have had a TAC ticket open for a month and after trying many changes to ACS configuration per Cisco, mos...

Is there any documentation for using Cisco Secure ACS 3.2 with IBM Directory Server?

I am using Freeradius to authenticate login to various network devices. I am also doing exec accounting successfully. I wanted to try command accounting on a 3640 with IOS 12.2(21). This is the config:aaa new-modelaaa authentication login default gro...

The problem is like this: ACS ver.3.2(2) on 2000 Server. cannot enumerate those Adctive Directory user groups when trying to map ACS groups with the Windows external Database. Its not related to the bug ID CSCed71133. I've checked.What level of permi...

How is AAA Authentication configured on the Aironet 1200 to pass authentication for HTTP Browser Manangement Access

Has anyone got a sample config of a IOS router which is configured for per user doanloadable ACL?As of ACS 3.3 these ACL's are also supported on IOS devices, not just PIX's and VPN concentrators. The ACS config is relatively simple, however I fail to...