Network Access Control

I have a HP server running Cisco Secure ACS v4.0.1 on an HP DL380, with Win2003 Server Standard Edition, SP1. Processor is Xeon 2.4Ghz, Memory is 1.5Gb. Complete software version is 5.2.3790 Service Pack 1 Build 3790.When the server starts, CSAuth fa...

Hello.I am trying to get DACL's working on my FWSM (2.3(3)) From ACS 4. The users authentication is passes through to an RSA 6.1 token server. The user authenticates fine, however the ACL is not downloading.The bebug shows the following as the user a...

Hello,i'm looking a suitable way to export Netwrok Devices configured in CSACS 4.x for windows.With csutil.exe it seems that you can only be able to import NAS (using -i option); export is not mentioned.Before shearching i was almost sure that an opt...

I running ACS 3.3 over six months and running smoothly , Recently i got a error message from ACS serverFrom "External User Database" -> "Database Group Mappings" -> "Windows Database" -> Select "AD Domain" -> "add mapping" -> Got Fail Message "Failed...

hi i am having problem with command authorisation with acs. i am having a full version of acs 3.3i have configured my router like this.R1aaa new-modelaaa authentication login default noneaaa authentication login john default group tacacs+aaa authoriz...

i am through with shell command authorisation with acs . i didn't get much help out here from this forum abt acs.if anybosy has doubts abt it feel free to ask i can send u the router configs , acs screenshots and explaination also if required. see ya...

Hi,I am using radius to authenticate user who connect to LAN but always fail...here is the error in ACS report "external DB account restriction" can anyone help me to resolve ?Many thanks...Sholeh

After the successful installation of the Cisco AR 4.1, we were able to verify open authentication using the "radclient". But when we started to configure AR with EAP-TTLS, we noticed that the only fields appearing under "eap-ttls-service" are Name = ...

Using this configuration to radius control console and telnet access :aaa authentication login default group Sts-radius localaaa authorization exec default group Sts-radius local aaa accounting exec default start-stop group Sts-radiusIn wlse I've con...

hi i am having problem with command authorisation with acs. i am having a full version of acs 3.3i have configured my router like this.R1aaa new-modelaaa authentication login default noneaaa authentication login john default group tacacs+aaa authoriz...

i am through with shell command authorisation with acs . i didn't get much help out here from this forum abt acs.if anybosy has doubts abt it feel free to ask i can send u the router configs , acs screenshots and explaination also if required. see ya...

I want to define a user/group that has the ability to connect to a VPN, but not via the CLI or any other method.Currently my VPN users can also log in via the CLI on my routers. They don't have enable access of course, but I would like to prevent the...

Hello All,I was wondering if there was a way to get a VPN tunnel that terminates on a Cisco router to authenticate against a Windows 2003 domain without using a RADIUS server or something of the sort. I would like to be able have the router Authentic...

A very intresting problem. I have a TACACS ver 3.2 system in place. I currently am able to authenticate agains it with no problem using SSH & Telnet. However, as soon as I try to use http, the authentication is never succesful (I get prompted for a u...