Network Access Control

Hi all,We have two sites A and B. On site A we have PIX 515 and a T1 line. We need to establish connection to site B to allow the windows 2000 domain clients on site B to authenticate with the domain controller on site A and to acquire IP addresses f...

I have built two ACS for Windows servers on Windows 2003 SP1. The AD environment is Windows 2003 SP1 as well. I have configured the two ACS servers on each box. However, when I go to replicate from box A to box B, the following error appears:Inbou...

I want to make restrictions for those who authenticate through AAA, after the authentication passed it will check the user caller-ID, if it is found at her/his account succeed, otherwise failed reply. Is this feature supported at the ACS 3.3?

HiI need help concerning external database configuration.....actually I want to configure ACS to athenticate users based on domain databasewhen I check on ACS servises I cannot see CSAgent and it looks like I need the API and this CSAgent to can run ...

I have a switch setup to use radius. I have the aaa-new model list applied to my console and telnet ports, but they only work with pap. If I try chap in my remote access policy, login is not allowed, and the radius server's event viewer reads, incorr...

I have configured my pix to authentication using tacacs first; if tacacs is not available it must fall back to LOCAL authentication. The TACACS authentication works fine, when I take out the ACS from the network, the local authentication works as wel...

Hi All,I have configured dot1x authentication on 3750 switch and configured a Windows 2003 radius server as an authentication server. When running debugs aaa and dot1x, I do see the reject coming from the Windows Radius server. It says length of pack...

Is it possible to run EAP-FAST for WLAN clients only and EAP-PEAP for internal LAN clients only?I don't want wireless users authenticating in PEAP.

Within ACS when adding a user there are 5 fields called Supplementry User Info. Those field names are defined within Interface Configuration, User Data Configuration. The question is: Is it possible to populate those fields while doing a ADD import...

I need help on the TACACS+ accounting is not registed on the log tacacs when I telnet to the MGX.

Hi,Can there be any potential problems, if we want to migrate an existing Cisco ACS Database to a different physical Server (Keeping the same IP information etc) ?We were running Cisco ACS evaluation version for Cisco NAC (CTA) and now want to make i...

I'm attempting to upgrade to ACS 2.3.6(2). I've already upgraded to RSA SecurID v6.0.2. ACS 2.3.6.2 works great with an old SecurID v4.X server I have lying around. It refuses to work with my production SecurID 6.0.2 server. Ideas/comments/empath...

Which of the following authorization commands are valid? (Choose two.)A. aaa authentication exec home radiusB. aaa accounting exec home radiusC. aaa authorization default noneD. aaa authorization exec home radiusE. aaa authorization network default e...

when receiving a Radius Disconnect Request (pod), the PDSN replies with a "session context not removable". In the aaa pod debug, i can see that the server found a matching session and issued a kill request. but then the debug shows the mentioned mess...