Network Access Control

The first step of our NAC implementation would be to segment our network in two VLAN´s. One production network and one consultant network.Is it possible to check the Windows XP client´s active directory domain membership and segment them only based o...

Hi,I was wondering about logging and aaa accounting.I notice some networks will have a syslog server and a tacacs+ server with aaa accounting. Is it best practices on a security perspective to configure a router to use a syslog server and a tacacs+ s...

Hi, Does the feature “IKE Pre-Shared Keys Using a RADIUS Server for the Cisco Secure VPN Client” available in PIX 6.3(5) release? or it's only in IOS release? I'll appreciate if somebody can help me with this! It’s very important to us to implement t...

Hi all,I'm trying to configure both VPN client authentication and access to remote networks, but is this even possible?The configuration: Pix515E with swver 7.1(2). VPN software clients. Windows server2003 with IAS. Site-to-site VPN to remote network...

Hello,i have a little Problem, so I hope you can help me.I have an external Radius Server and an ASA5520 which submits the IP-address and the address of the DNA-Server to the registering client (with cisco-avpair = ip:addr=x.y.z.w)How can I submit th...

Hi I have to enble virtual-profile aaa in 7200vxr router but i have only two options: Router(config)#virtual-profile ? if-needed virtual-template I don't understand where is the problem? Any help please the version is: isco IOS Software, 7200 Softwar...

Hi,Can anyone help. i'm installing a cisco ACS webserver for UCP.After installation the users do not get the any display after entering their configured username and password. The url http://172.29.12.230/securecgi-bin/CSUserCGI.exe is displayed give...

when i tried to install SDM on cisco2611 router it is asking for username & password of level 15 so configured a local user of level 15 on the router & provided the same creditentials to SDM installer but the authentications fails can any body pls cl...

Dear there:Here I use MAC Authentication with a ACS in a Wireless LAN, but I didn't find any encryption options both in AP side and the client side. Is that the MAC Authentication doesn't support the Dynamic Encryption?so, with MAC Authentication on ...

Hi,I want to import NAS devices into ACS 3.3 and I want to use CSUtil.When I use the "ADD_NAS" command, is it possibile to import from file also the option like "Single Connect TACACS+ AAA Client" or "Log Update/Watchdog Packets from this AAA Client"...

Hello,i have a strange problem. I am running two ACS. Severals users on ACS1 should be authenticated on ACS2. So a user is created on ACS1 and has a RADIUS Token Server configured for authentication what is ACS2. On ACS2 the user is available.When i ...

have anyone ever experience this problem: we got two ACS servers for a client (primary and secondary). we configured the primary one and is working ok. However the secondary ACS cannot boot. Once you connect the power cable and press the power button...

We have recently upgraded ACS V3.3 to V4.0.1 on Windows server 2003 SP1. However, now the windows service CSAuth fails to start. There's nothing in the CSAuth log file either.If we do clean installs, installing V3.3 from new and then do a upgrade to ...