Network Access Control

For the life of me, i cannot get my users to be able to create & edit subinterfaces using privilege levelsThis is my current privilege setupprivilege ip-vrf level 7 rdprivilege vpdn-group level 7 descriptionprivilege interface level 7 pvcprivilege in...

I have a multipurpose Radius server that already manages one Realm. I'd like to add another Realm for Administrators so that Administrators can use it for authentication on the routers. Currently, both Realms can authenticate on the router. How do I ...

We're using the VPN 3000 client, v3.5. When we tell the 3000 server to use SecurID authentication it works fine. If we switch to using RADIUS authentication, a lot of users cannot connect.The user never sees the "Username/Password" box and from the l...

Hello ACS 3.3.2 has a mapping to a 2003 MS AD domain member machine. The users are all in the AD. Now when a valid user but with a wrong password tries to login, then the failure is just seen in the 2003 MS security event log and not in the ACS faile...

I am unable to logon to any CatOS devices via ACS, using AD userids. I am able to logon to IOS devices with the AD userids. I was able to logon to CatOS previously (for the last year) with the AD userids. I am not sure what changed. I created loc...

I am trying to control privileged access on routers using Radius. CCO documentation states that the Radius method doesn't work on a per-username basis (have to use Cisco ACS Tacacs+), so I am using; aaa authentication enable default noneAnd then I wo...

I don't know Cisco Catalyst 2950G can provide these featureI want configure all wire user must be authteticated by mac address then these mac assress is pre-define on ACS ServerI had tried it on wireless architecture workable，but i want to know this ...

Hello,I am having an authorization issue with ACS 3.2.3. This is what I am trying to do: I have 2 Network Device Groups, one called core the other called edge. I have 2 groups of admins. One is Core admins and other is LAN admins. What I am tryin...

I have searched for an explanation of the following command, but it is not available on the command lookup tool:radius-server attribute 55 access-request includeCould somebody enlighten me on the meaning of this?Thanks

Hallo therejust a short question:Which bit size and which digest should I use and what are the reason for that. I would like to use the ACS for PEAP and https access.many thanksoliver

I have manage to get wired 802.1x working using Windows Active Directory as the database. With machine authentication, single-signon can be achieved.Setup:C3750 switch - Cisco ACS 3.2 - Windows ADSequence of events:1. 802.1x machine authentication2. ...

Hi,If I configure following command, how can I enter enable user name and password to get into enable prompt? Can someone explain to me how to enable tacacs autherntication for enable access?"aaa authentication enable default group tacacs+ enable", ...

Hi everyone.I want to Authenticate and Authorize VTY-Access to Cisco devices using TACACS+. The config is pritty "straight forwasrd", BUT:I want to forward the TACACS+ Request through a NAT device and on to the "Internet" where the TACAS+ server is l...

Is it possible for MS IAS radius to assign the local ip pool to use for vpn users in Pix 7.0(1)?I would like to assing different subnets to each class of vpn user without using separate tunnel-groups and pre-shared-keys.I've tried a few different avp...

I have 2 ACS servers. And had configured Database replication between them. Past from few days the replication is not happening b/w the two. I found the following message in log files in the primary server "Cannot replicate --- server not responding.