Network Access Control

Hello, The 7920 still doesn´t support EAP-FAST. So I´m wondering if it is possible to restcrict EAP-FAST users from turning LEAP on. Is there a way in ACS to do that ?

I am not sure if I am taking the proper steps to this or not. Here is my scenario:I have a device that can utilize any Radius. I am using Cisco ACS 3.3. Only particular devices on our network will be allowed to authenticate via radius to this devi...

we are currently migrating all our windows based servers and therefore applications to VMWare running on IBM ESX machines. Is there anyone out who has done this for ACS v3.3 or at least knows whether ACS v3.3 will work is a VMWare environment.

Hi, I have a strange problem. My NAC was working,then I change the domain name of my ACS to put in a labs domain, and now I have that authentication failure message.I have the same certifate on the server and the host(windows XP SP 2 + CTA 1.0).I hav...

I'm having problems with the last step of the above chain.I'm trying to configure Windows XP to authenticate using SecurID via PEAP over a wireless connection.I have the Standard Windows clients configured using the information in the "Cisco Secure A...

Is it possible to install ACS Remote Agent to Microsoft AD ? Has anyone done this before ?Best RegardsRaymond

hello,I have vpn concentrator that is supposed to do authentication using an internal group with kerberos/active directory as authenticator.When client try to connect it does not work and i get the following in the log: 01/19/2006 14:32:41.260 SEV=3 ...

Olease can anyone help in AAA and MD5 configuration on Cisco 3640 running SIP. My carrier told me that the only way that my calls can be Authenticated is thru AAA or MD5, eg -Host:Authentication ID:Secret:Please I need your help thank you in advance....

Can anyone explain how the proxy for EAP-TLS is supported in CSACS?I think the SAN feild is used for the proxy distribution table but even if this is correct what about the certificate authority. Who does what in terms of certificates etc?I have to i...

I have a tacacs+ server and i need to create a group where a user can only work on the interface paramaters and deny other commands. For example i dont want the user to use "sh run" or "sh start" but can use the "sh interface" command.And also allow ...

CSAdmin service does not load. Recieved unknown windows error and nothing is written to the event viewer. Running on a windows 2000 server SP4.

We have two Data Centres with the primary ACS server in one and I am trying to install a secondary ACS server in the second one.They communicate at a TCP level but I can’t get the second ACS to replicate the first one. They are both installed on win...

What IOS version do I need to have to use 802.1x? We have version 12.0 on some of our switches and I can't seem to find the commands for it (aaa authenticaiton dot1x... )

HiWe have been using Ciscoworks to collect switch/router configurations for a number of years. Since we implemented ACS V3.3 we have been getting problems with failed logins.After looking at the failed attempt logs we see spurious logins like "q" or ...