Network Access Control

Is it possible to log NAT translations on a PIX device using Radius Accounting (for possible fraud invastigation purposes)Regards.

I'm new when it comes to this stuff, but I have bumped into something that I can't seem to resolve. ACS 3.2-IOS and Catalyst devices.TACACS+ - Every user in our company is in ACS. We currently have only one group(default) that all of the users are lu...

Good morning all,I try to configure remote agent with my ACS Engine (3.3.1) in order to browse AD. I'm able to list all domains but each time I try to define a mapping, I have an error message.I check on my remote Agent, and the logfile reports this ...

Hi folks,I would like to know how to find out name(or number)of virtual interface when pppoe client authenticates on server.With ios version 12.2 our radius got right attributesfrom pppoe server like:NAS-Port = 11Cisco-NAS-Port = "Virtual-Access11"NA...

Hi,Although Accounting Logs are generating but I am unable to see any records related to Radius authentication. Neither Failed attempts nor Passed/Logged In Users are there. I have configured my RAS device to use Port 1812 for authentication & 1813 f...

when i use web access acs.the login page appears,i don't know what username should i input,where can i generate this username?which step can i generate this username,if it's during the install step?or it is a default name like pix to access pix?thank...

I can't find any info regarding ACS remote agent for windows running on a 2003 server Active Dir platform. I have ACS ver 3.2.3 Build 1111. Has anyone been able to do this with no problems?The info I can find talks about windows 2000 server with se...

I am currenlty using Cisco ACS 3.0 and have noticed very strange logs under Reports,failed Attempts.It is showing numerous failed attempts from username : azbycx to our 4 Core 6500 Catos Switches.The caller-id field does not display a source ip addr...

I am busy implementing an ACS and have completed the 802.1X authentication using the Cisco Secure Database. This is working fine. I then changed user database to point to the Linux NDS LDAP server and everytime I try to authenticate I get the followi...

ello,To perform configuration change management, I need to setup scpconnection to our cisco router.Cisco Router 2801IOS Version 12.3(14)T4I have enabled ssh on the router as described below.Current configuration : 7482 bytes!version 12.3service times...

I have the following aaa commands on my devicesaaa new-modelaaa authentication login default group tacacs+ lineaaa authorization exec default group tacacs+ if-authenticatedaaa authorization commands 15 default group tacacs+ if-authenticatedNOw I crea...

We currently have a bunch of wireless access points and are looking for a way to assign users to a certain vlan when authenticated by our ACS server. We do NOT want to do MAC address tables for these hosts. I would like them to enter a user name and ...

CISCO ACS version was upgraded to 3.3.3 however, according to Cisco bug CSCSB46852, WLSEWDS (wireless LAN) rogue AP detection function has ceased to work. The next version, 4.0.3 is not yet available. They could roll back to 3.3.2. Is that possibl...

I have a VPN 3005 concentrator configured to for WebVPN access using the Cisco SSL VPN client. The concentrator and SSL client are the latest version. I would like to use external user and group authentication/authorization via Windows 2003 AD doma...

Hi,I have an ASA5510 device and wish to use Microsoft IAS to provide AAA. Is it possible to use the same IAS server to Authorize VPN and Telnet users?I wish to use AD credentials but I want to specify different sets of users to access either telnet o...