Network Access Control

I am a little confused as to how logging into the router works with AAA and the local username database.First of all I have AAA Authentication enabled and using a TACACS+ server. I have created one username xxx password xxxx for emergency access and...

Hi all.I configured a PIX515E running 7.1(2)software for cut-through proxy.I also configured "aaa authentication secure-http-client".Then, I proceeded with manual enrollment of an "official" certificate, signed from Verisign, following the document a...

Hi,I have a cisco secure ACS 3.3 solution Engineer server which i'm currently using as tacacs server for authenticating some network communication engineers who changes routing configs on the network. Now, i want to deploy 802.1x on the network and n...

How can I configure a WebVPN filter using VPNC3000 RADIUS attributes? Only using Cisco AV?Thanks.Andrea.

I'm using a radius server to control telnet access to my infrstructure devices. Since enabling this, I can no longer log in via CNA. Have tried using http auth local aswell as via Radius.My config is thus:aaa new-modelaaa authentication login default...

Hello,I am confused on aaa accounting. If I wish to account all commands and the levels I have configured are say 5 and 15, do I need to include level 0 in my aaa accounting commands?

I have a simple version question RE document 68840. There are pages of vulnerable versions explicitely listed. But I want to be sure that if a shorter version name is listed that another isn't included by default and not explicitly included.IE - 12...

Hi,I was wondering if there is a way for my authentication and authorization for the access to net equip, be tied to an OU in AD, so net admins can use their domain logins to make config changes. We are using Radius for AAA. Thanks for your help.

Trying to set up AAA on the PIX515e so I assign accounts with different privilege levels for access. I used aaa-model on my routers and it worked fine. I am stuck here. Any advice or direction is greatly welcome! TIA, Gary /

The first step of our NAC implementation would be to segment our network in two VLAN´s. One production network and one consultant network.Is it possible to check the Windows XP client´s active directory domain membership and segment them only based o...

Hi,I was wondering about logging and aaa accounting.I notice some networks will have a syslog server and a tacacs+ server with aaa accounting. Is it best practices on a security perspective to configure a router to use a syslog server and a tacacs+...

Hi, Does the feature “IKE Pre-Shared Keys Using a RADIUS Server for the Cisco Secure VPN Client” available in PIX 6.3(5) release? or it's only in IOS release? I'll appreciate if somebody can help me with this! It’s very important to us to implement t...

Hi all,I'm trying to configure both VPN client authentication and access to remote networks, but is this even possible?The configuration: Pix515E with swver 7.1(2). VPN software clients. Windows server2003 with IAS. Site-to-site VPN to remote network...

Hello,i have a little Problem, so I hope you can help me.I have an external Radius Server and an ASA5520 which submits the IP-address and the address of the DNA-Server to the registering client (with cisco-avpair = ip:addr=x.y.z.w)How can I submit th...

Hi I have to enble virtual-profile aaa in 7200vxr router but i have only two options: Router(config)#virtual-profile ? if-needed virtual-template I don't understand where is the problem? Any help please the version is: isco IOS Software, 7200 Softwar...