Network Access Control

Anyone else find the documentation for implementing NAC on ACS 3.3/Win and CVPN3k a little confusing?http://cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a00802335f1.htmlI finally got the certificates installed on ACS. B...

Is way I can use local authentication for the auth-proxy on the router?Thanks

Can the initial listening port (TCP 2002) for the CSACS HTML management interface be changed? If so, how?Thanks.Colin

I am trying to link my Cisco ACS v3.3 to my 2003 Active Directory domain for authentication. I am receiving this error:"Failed to Enumerate Windows Groups. If you are using Active Directory consult the installation guide for information". The only...

I have following configured on the PIX:user user1 password cisco1 privilege 1user user15 password cisco15 privilege 15aaa authentication telnet console LOCALaaa authorization command LOCALI used both user1 and user15 login(via telnet), there's no dif...

We have a VPN concetrator that we use the Active Directory/Kerberos authentication with to authenticate users. It worked fine on our WIndows 2000 domain controller, but now that we are using Windows 2003, it will not allow any users to authenticate....

Hi,I've a Cisco Secure 3.3 and a Windows 2000 Domain.I've tried to configure user authentication on ACS to Windows external DB. With the "Unknown user policy" enabled, all works fine. Then I've disbled this policy and specified the same user in the i...

Hello folks!!!In my PIX 515E I hv configured AAA configuration(tacacs+) & hv also configured serial console authentication as "local" & telnet console authentication from tacacs+ server.Apart from this I hv also configured authorization as "tacacs+" ...

Hi,1. First issueI have following commands in my pix configurationauth-prompt test_accept auth-prompt test_reject auth-prompt test_prompt however I am not getting any of them. Any idea why?2. Second issueWhich command do I enter so if my radius serve...

Hi:I have worked with aaa in a catalyst 6000. first with ACS over solaris and then with CSACS appliance. In all time I have worked with the appliance I received the message "%IP-3-TCP_BADCKSUM:TCP bad checksum" for each command I type.Somebody knows...

What's the correct way to configure authorization on PIX?By following the steps in:http://cco/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800949d6.shtmlThe PIX always hangs and has to be rebooted.

I'm integrating remote user with windows active directory. My AAA client is a Router IOS with radius protocol, it "speak" with Cisco ACS 3.3. When a user has to change a password, bc it has expiry, the user can't authenticate and the ACS logs says "W...

Hi, Please need help on this, the following is my scenario:R3 is doing auth-proxy and R1 is running http server. Once I browse from PC to R1, get the auth-proxy prompt and get successfully authenticated by tacacs+ and shows established when do "sh ip...

I have a windows 2003 server with MS-Ras and authentication with ACS Server.In my ACS I have defined an AAA Client Hostname for ms-ras with Authenticate Using =RADIUS (Ascend).In interface configuration I configure Microsoft RADIUS options with all...

Hello everyoneI want 2 know what's AAA ???Anything and everything that needs to be know.If possible direct me to an appropriate URL where i can read all about it.ThanksFahad