Network Access Control

I have following configured on the PIX:user user1 password cisco1 privilege 1user user15 password cisco15 privilege 15aaa authentication telnet console LOCALaaa authorization command LOCALI used both user1 and user15 login(via telnet), there's no dif...

We have a VPN concetrator that we use the Active Directory/Kerberos authentication with to authenticate users. It worked fine on our WIndows 2000 domain controller, but now that we are using Windows 2003, it will not allow any users to authenticate....

Hi,I've a Cisco Secure 3.3 and a Windows 2000 Domain.I've tried to configure user authentication on ACS to Windows external DB. With the "Unknown user policy" enabled, all works fine. Then I've disbled this policy and specified the same user in the i...

Hello folks!!!In my PIX 515E I hv configured AAA configuration(tacacs+) & hv also configured serial console authentication as "local" & telnet console authentication from tacacs+ server.Apart from this I hv also configured authorization as "tacacs+" ...

Hi,1. First issueI have following commands in my pix configurationauth-prompt test_accept auth-prompt test_reject auth-prompt test_prompt however I am not getting any of them. Any idea why?2. Second issueWhich command do I enter so if my radius serve...

Hi:I have worked with aaa in a catalyst 6000. first with ACS over solaris and then with CSACS appliance. In all time I have worked with the appliance I received the message "%IP-3-TCP_BADCKSUM:TCP bad checksum" for each command I type.Somebody knows...

What's the correct way to configure authorization on PIX?By following the steps in:http://cco/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800949d6.shtmlThe PIX always hangs and has to be rebooted.

I'm integrating remote user with windows active directory. My AAA client is a Router IOS with radius protocol, it "speak" with Cisco ACS 3.3. When a user has to change a password, bc it has expiry, the user can't authenticate and the ACS logs says "W...

Hi, Please need help on this, the following is my scenario:R3 is doing auth-proxy and R1 is running http server. Once I browse from PC to R1, get the auth-proxy prompt and get successfully authenticated by tacacs+ and shows established when do "sh ip...

I have a windows 2003 server with MS-Ras and authentication with ACS Server.In my ACS I have defined an AAA Client Hostname for ms-ras with Authenticate Using =RADIUS (Ascend).In interface configuration I configure Microsoft RADIUS options with all...

Hello everyoneI want 2 know what's AAA ???Anything and everything that needs to be know.If possible direct me to an appropriate URL where i can read all about it.ThanksFahad

Hi,I installed ACS on a domain controller server. After the installation, the console requires a administrator username and a password. I tried to enter my local administrator loggin but it tells me "login fail... Try again". As during the installati...

Hellois it possible to assign different ip pools defined on the ACS to different NAS? For eg. I like to assign the IP pool x to the NAS X and the IP pool y to the nas Y. So if a user logins in to X he gets the pool x and on Y the pool y.thanks for an...

We have a situation where two existing 3.2.1 ACS servers are replicated. The boxes is to be replaced by ACS appliances running 3.3.2. The problem is however that we cannot replicate between different versions.We are planning on upgrading the master s...

I am installing ACS (3.3) for the first time - ever.I get through all the splash screens, but when I try to creat a user or a group or a sys admin, I get "error on page". I current do NOT have it on a network - other than the big I... what am I doing...