Network Access Control

I am testing wired 802.1x with the desired behavior of machine auth with user auth. I have a 6509 CAT OS 8.3(5) using the dot1x global defaults, 2 laptops one is XP SP1 and XP SP2 both with AuthMode=1 and SupplicantMode=3 with windows update as of 0...

Hi,If I use aaa for authentication, is there a fallback to the pix firewall's database if the aaa server is down, just like the IOS commands:aaa authen default group-radius local noneWill it mean that if the aaa is down, we will not be authenticated ...

Hello, I'm trying to setup on a Pix 501 running IOS version 6.3 some open ports. I want to allow from outside, any ip address access to ports 2020 and 4098. I want to have the user authenticated before the access is allowed. Is this possible? I...

Hi All,Need some help how to use the DBUNLOAD utility to compress or reduce CSU database size. Our version of CiscoSecure for Unix = V2.3(3) We have old CSU installation on Solaris and running out of disk space

Hi All,we are running Cisco secure on Unix 2.3(3) version. We have around 2000 dial in users. We have bought in 2 new Cisco secure appliance ver 3.2. Can you pls let me know if you have any migration tools for migrating the users from Unix database t...

Hello, Can anybody explain what is the purpose of this command. I studied the documentation (command reference) but unable to clearly understand the purpose of this command.Thanks in advance,Regards,Mo

ACS3.2 run on winddows2000 , system shutdown usually was unexpected.I check the EVENT Viewer, it display--The data buffer created for the "CSRadius" service in the "C:\WINNT\system32\rad_mon.dll" library is not aligned on an 8-byte boundary. This ma...

Hey all,I'm implementing Cisco ACS v3.1 in a test environment. I'm authenticating using Active Directory and I've created 1 account to test using the Cisco Database. I just downed the ACS server to see what would happen when I tried to authenticate...

dear all,i am instaling cisco secure acs 3.3 for authenticating my pix 535 firewalls.i have big network. all my firewalls are outside to the acs server.can i install acs server outside to the pix ?? can anybody say the minimum configuration. thanks i...

Hi,When using Cisco ACS as the RADIUS server, the authentication is being failed by the VPN Concentrator with the following message"Authentication Rejected: Group password is not configured"Even though the the ACS server send an Access-Accept back to...

Hi everybody, Can anybody help me out here please? I'm using the ACS appliance running software v3.3. I'm doing TACACS+ authentication from a router to the ACS box with backend authentication to a Novell NDS server. OK, I set it all up and got it a...

The problem is the cert is only valid for 1 year (which is what the Enterprise Admins set up), so when the year is up, I can find no way to automatically renew all the certs so the users do not have to intervene and request a new certificate again.

I am using the 1111 appliance to authorize ssh and https sessions to all of my AP's. It works great. Now I want to start doing MAC AUTHENTICATION for all clients to the 1111 appliance also. When adding the AP's into the appliance for ssh and https...

I am looking to secure the access to ACS 3.3.3 on a Windows 2003 SP1 server. I am running only radius and access to an external Windows database. Currently I am looking to allow: - tcp 2000 -> ACS replication - udp 1645 -> RADIUS authen & author ...