Network Access Control

I have set up ACS to control access to my local LAN users who connect to the network via c2950 switches.I have configured the default Time-of-day setting to stop local LAN users logging in before 7am, I have followed the instructions in Cisco documen...

Hi everyone, I'm doing some testing with 802.1x authentication on a Catalyst 3550 switch, using an eval version 3.3 of ACS (windows version). I do have it working, however, it appears that I'm forced to essentially, login to the network twice. Once w...

I am using the CiscoSecure ACS v3.3 build 11 on Windows to handle authentication of some network devices. I had added in a VSA for our 3Com 4400-series switches which allowed us to authenticate against our Windows AD for administration of the switch...

I'm having a problem getting in SDM through tacacs (acs 3.3) Logging in via CLI (tacacs) works fine. When i put http authentication to local all works fine, I'm using the following sttings:!aaa authentication login default group tacacs+ localaaa aut...

I have a VNP concentrator, an ACS 3.2 server and a Novell eDirectory tree. My goal is to allow my VPN users to use their Novell name and password to log into the vpn or webvpn.I currently have my concentrator use an external RADIUS source for authen...

HII am configuring command authorization for our FWSM and switches. I seem to have it working OKish for the FWSM but I think I´m nissing something as far as the Switches go.I basically have a user in a group which I have configured as follows under "...

If you have an ACS aplliance and do you want to use a base of external data base Activate Directory, it´s necessary install an agent where it be been located the Activate Directory, If you have more Activate Directorys installed it in other machin...

I would like to perform the following in our environment. I currently have CS ACS Appliance v3.3. I plan to install CS Remote Agent on a Windows 2003 Domain Controller for the backend authentication database using A/D.Goal: I want to use the ACS t...

R5 dials R2.R2 is supposed to authenticate R5 and then callback to R5.So far I see that the problem is the ACS tacacs+ server. Authentication failed...03:52:55: TPLUS: Using server 10.1.1.10003:52:55: TPLUS(00000070)/0/NB_WAIT/65435178: Started 20 se...

Hi All,Pls tell me how to restrict the IPs for telnet and for limited commands.

I have an ACS box that is working properly and you can administer it remotely from any device except behind an 831 doing VPN to the host site. I have looked through the ACS and there are no IP or Port restricitions. Ocassionaly it will actually log...

Hello all,I am setting up a 3560 switch to talk on our network. It has a routed port (gig0/2) and will talk to 2 other routers on our network. Anyhow I am currently purplexed as the 3560 just will not talk to the others. This is at our main site and ...

I have a requirement for audit LAN switch admin access for 3550's & 2950's. I also have a requirement to lockout an admin account upon 3-5 invalid logon attempts. The account to remain locked out until re-enabled by another admin.Is AAA and TACACS wh...

Hello,does anybody know if it is possible using aaa and privilage level commands to let a user to configure a specific interface on Catalyst 2950 switch (IOS version 12.1(22)EA4) ? For example, a FastEthernet interface but not the Giga interface.Tha...