Network Access Control

I am just wondering if anything changed by the time this link was posted:http://www.cisco.com/en/US/partner/products/sw/secursw/ps2308/products_data_sheet0900aecd801a9de9.htmlregarding IOS support of active directory authentication for CVPN client. I...

Hello,I'm using tac_plus and want to use my own script for authorizing users, based on the NAS and based on the command a user enters.The documentation mentions fields that can be passed to a script (like user, name, port etc) and that works geat, bu...

Hi all,Currently we have username/password authentication for our dialup users using AS5300 via ISDN lines to the Cisco ACS. However, we are thinking doing CAT card authentication with a built-in reader on the keyboard and the user can swipe their CA...

I have two VPN groups in VPN3030 and want to associate to the differnet domain that NT and AD in ACS. Q1) if I join the two domains(NT and AD) in the ACS external database, how choose the domain the request from VPN3030? please explain me two cases t...

I am setting up a Windows 2003 server with IAS as a RADIUS server for login authentication and 802.1x. Having trouble with policy, authentication, etc. Does anyone have a white paper with step by step configuration?Thank you

Hi,Trying to get an msfc2 set up so that authentication occurs on our ACS box.I've accomplished this on our 3745s. (Had a lot of help getting to that point on the 3745s...)IOS on 3745s is 12.3(16).IOS on msfc2 is 12.1(8b)E19.The problem seems to be t...

We are looking for a way to import (using csutil command) a text file that has username, group, beginning date and expiration date. Can this be done? Or is there a script out the that will allow us to do this?ThanksDwane

Hello,I'm using MS Certificate Server to provide certificates for authentication. The problem is, that after changing windows user password VPN client is no longer connecting. Anyone had similar problem?ThanksSeb

We are using ASA 5520 7.0(4)s as our vpn gateway and we authenticate users based on Active Directory . My question is how can I control access based on Group in active directory. Cause right now any active directory user is authenticated. I want to a...

Hi,is it possible to have the PIX515 ask for authentication on inbound port80 traffic ?I would like this, so the traffic does not reach the webserver, if is not authenticated.I have a VPN concentrator 3000 as well, which is combined with the PIX515, ...

Hello, I installed the last version of Cisco ACS 4.0 and I have a problem with the "Windows database configuration". I want to authenticate users on an active directory, but when I want to configure it I have an error message: "An error has occured w...

I want to enable SSH on my Cisco 6509 on VTY 0 4. However, on VTY 0 3, I want to use RSA authentication, and on VTY 4, I want to use local authentication. (A script logs in with a static local username and password, and a script cannot utilize the ev...

I want the network clients switch ports to be authenticated based on windows authentication. (801.x + ACS + Windows DC). Does any one have a documentation of implementing windows based network authentication?Thanks,yasemin.

I would like to know what I would need as far as an ACS server to allow and disallow people from connecting to the switches based on their mac address. I have a customer who has WYSIWYG terminals and cannot add any time of software for authentication...

Hi,Does anyone know if there are any support for EAP-TTLS in the upcoming release 4 of ACS? We have invested heavilly in ACS but now we really need EAP-TTLS support (both auth and proxing).CheersAnders NilssonUMDAC