Network Access Control

We have a catalyst 5509 running the old CatOS. I have everything with Tacacs set up correctly to log in but it won't pass through any login directly to enable mode. After I log in then I have to enter the enable password. All of our other routers wor...

Hello I have many user with need to access the network, I have a ASA5520 with version 4.0 and I configure different profiles by different users, exist many tunnel-group's and group-police's in the ASA.I need know if is posible create the tunnel-group...

I hear its possible to let my vpn server use AD to authenticate its clients. Is this possible and where can i read about it?

Hi we've got an Cisco 7200 termination our incoming PPPoE Connection. That works quite well, but to localize the clients we would like to log via Radius the following parameters:client-mac-address[31]interface[157]Debugging the aaa process we got fol...

Hi, allMy ADSL system's using a ERX-700 (juniper) as a BRAS and 7206 for backup. Everything is alright except assigning name of pool to BRAS.ERX-700 use frame-pool attr to provide pool name instead of addr-pool attr as 7206. IOS can unsupport this at...

Hi GuysI've just upgrade your PIX 515E to pix 7.1. Seeing that version 7.x does not support pptp, I'm attempting to rollout the Cisco VPN client. During the vpn configuration it indicates that the can do AAA via LDAP. When I try to test the authenica...

I am able to import client and group info but need to export to verify they are all there as i have migrated from unix to windows...thanks

Hi, Got a server running ACS v3.3 talking to a SecurID ACE server. When I set a user up to use SecurID, ACS always reports "CS user unknown" - when the user is plainly in the database. If I change user back to use Internal auth - it works a treat. If...

My customer is running into the bug CSCsb47726 .Does anyone know about fix ? This is in SEV1 state and still assigned ?

can we have cut-throguh proxy with local authorization and authentication lists on the cisco router and pix . pls guide me on this and is there any configuration example for this. thank u sebastan

Hi,we have problem with ACS 3.2(Win2k):2 days before, ACS starts logging messages "Service CSAuth has been stopped or paused by the system". Occurence is random and frequent. No changes on system done. Any ideas?Thanks for helpStepan03/24/2005,17:27:...

Hi,When configuring ACS database replication and you get to the "Partners" section where it shows you the listing of available ACS servers. Where does ACS find these other ACS servers from, or must you configure them within ACS somewhere? I've got to...

Folks,I have an eval copy of ACS 3.3 working fine on a W2K server.However, I installed another copy on a win2003 server and I am having real difficulty just adding an AAA client. I tried it originally with ACS 3.3, then upgraded to ACS 4.0 to see if ...

Does any knows that it is possible to replicate the ACS database when the primary and the secondary ACS servers are residing in two different DMZs. All traffic leaving the DMZ must be natted. I am receiving an error of "key mismatch" on the secondary...

Hi,I want to deny "configure terminal" command for some of my users, how can I do that with ACS3.1 and "aaa" ?thanksOzlem