Network Access Control

Hello,What would be required to have an ACS server in a DMZ talk to the active directory domain that is on the outside of the fw.ACS-----(dmz)PIX(outside)---AD DomainOne department owns the DMZ and wants the ACS server to be in the DMZ and the other ...

I have a 3002 concentrator connecting to a 3030. Using Lan Extension Mode. The 3002 is using DHCP to assign addresses. I want the users connecting to the 3002 to be forced to authenticate with a domain server on the head-end (3030 side). I want no on...

I´m doing some tests with the new 802.1x authentication feaures in the CAT2960 switch and IOS firmware file 'c2960-lanbase-mz.122-25.SEE.bin'. In particular, I´ve configured the 'Inaccesible Authentication Bypass' feature. What is wrong with it is th...

I am trying to create a seperate group called "WebVPNuser" and enable Webvpn permission only for that group and use Local authentication for users in WebVPnuser group. What i observe is users (under webvpnuser group) do not authenticate using WebVPNu...

Hi,I need to import the user and groups from version 2.6 ACS to version 4.0. The 2.6 online documentation talks of using the CSUtils to create a .txt back up of the users and group. But I cannot see how to import that into 4.0. Has anyone done this. ...

Is there possible to limit/control one concurrent connection per-user id with local database on PIX firewall?

hi could someone pls tell me where on the acs to configure the command level authorisation for users to access the routers.pls help i am new to this. i am also using a evaluation copy of it. sebastan

Hi experts,Is anyone aware of a software that will test RADIUS and/or TACACS authentication to an ACS server from a PC? Same as what you can do on the Cisco VPN concentrator from the page Configuration | System | Servers | Authentication | Test Scree...

We run ACS 3.0 on a windows 2000 sp. 4 server. A nmap scan shows a lot of open ports, e.g. 7/tcp, 9/tcp, 13/tcp, 1050/tcp, and also some udp ports.Does anyone know what ports the Acs use ?RegardsJohann FolkestadVolda Univesity College

Hi. I'm having a problem with the way I've set up http authentication for my users going out to the internet. My goal is to for the users' authentication credentials to remain active while their browers are open, but expire when they close their web...

I have a quick question concerning the configuration of the 3000 series of VPN concentrator. If an external database is used for authentication (ie Active Directory), is it possible to restrict which users can establish a VPN connection by employing...

I am trying to update the IP address of a number of users that authenticate against ACS4.0. I am imputing the relevant data into the accountactions.csv manually and manually running rdbms synch. I have attached a copy of the format I am using in the ...

Hi all,I am trying to configure a 3640 for authorization. The 'tricky' part is that I have to make a difference between dialup-access on one hand and exec-access on the other hand.I am using TACACS+ for authentication and authorization.The original c...

i have 2950 and 3750 switches. i want to give few lan admins access to view and change port speed and duplex, thru http acess. i can use ACS server (tacacs+). i tried to create local user with privilege 7. i also tried with tacas+ server. either way ...

Does any know if there are any issues replicating between ACS 3.3 and ACS 4.0. Also has many people migrated to 4.0 yet if so any major issues or reasons to upgrade?