Network Access Control

Hi all,ACS refuse to start, possibly after windows 2000 upgrade. The error message in the csauth log is :ADMN 05/05/2006 08:42:11 E 0360 1824 External DB [SecurID.dll]: Failed to load 'aceclnt.dll'ADMN 05/05/2006 08:42:11 E 0547 1824 AuthenLoadLibrar...

Follows the ASA7.1(2) configuraiton guide. Is the ASA device part of security appliance and able to support AD-LDAP authentication? if yes, can I have a configuraiton example.===LDAP AuthenticationSupported on PIX 7.1.x and the security appliance onl...

My ACS appliance (3.2.3) has lost it's IP address. Can I recover from the duplicate config of the server held in ROM or will I need to re-install the software?

I am using TACACS+ authentication and authorization for PIX integrated with the Cisco ACS 4.01. aaa authentication telnet console TACSERVER2. aaa authentication enable console TACSERVER3. aaa authorization command TACSERVERProblem is:- When I execute...

I have been trying to implement AAA (yes all of them) on a Microsoft ISA server. I even has them on the phone for 4 hours trying to get to the bottom of the issue. Other products dont seem to have the issues that Cisco does connecting. Is this even a...

I have a 7206VXR router that I can SSH into. When a user attepts to SSH into it I would like to see the attempted password. All I get is a message "AAA authentication fail reason: Password." I am using a local AAA authenticaiton on the router. I can ...

Does anyone know how to set the Dot1x re-auth timer using a Cisco VSA?We have 802.1x + NAC running, and when the policy check fails the user is placed in a quarantine VLAN. We do this using a shared RAC (merged with group settings). But, we want to l...

Hi everyone,I am trying to get my Cisco devices to log accounting information back to my TACACS server, accounting information such as IP address and commands issued.My config is pasted below but I cannot seem to get any messages back to the server a...

We are using ASA5510 as our VPN gateway and MS IAS 2003 for RADIUS & AAA. Using Cisco VPN client it is not able to authnticate. I get the following error in Event Viewer:Policy-Name = Dialup Group Authentication-Type = PAP EAP-Type = <undetermined> R...

Hello - I have a remote site connected via VPN, and I have AAA authentication to the network equipment at the location. Is there anyway to designata a specific ip address on the device that is handling the VPN tunneling? Only the private ips on the L...

Hi Everyone,Does anybody know if Steel Belt Radius would be able to authenticate both the telnet and enable passwords for RADIUS authentication?I have tried IAS, but apparently IAS does not have any understanding of the enable password and therefore ...

I'm trying to set ACS 4.0 up to validate posture via an external validation server, namely Symantec 10 AV. I have searched high and low and cannot find what to use for the URL for the AV server. Has anyone else successfully done this? I am also tryin...

I am trying to get a new 2960g to work with tacacs. After adding to the tacacs server and restarting the services I still do not get prompted for user name. What gives?aaa new-modelaaa authentication login default group tacacs+ enableaaa authenticati...

I did see a Cisco Access Control Security: AAA Administration Services from Cisco press without good reviews. Does anybody know of a good reference guide for ACS 3.3.3 or v 4?

Hi,I am trying to get a dialup config to work that uses virtual profiles by virtual template and AAA configuration. When I follow the Config guides (12.2 in my case) I am told to use the command virtual-profile aaa. This command does not seem to exis...