Network Access Control

I have an environment with three(3) Aironet 1200 AP's, Cisco 7920 wireless phones (about 12 of them) and about 100 notebooks (IBM T30's T40's and T42's). I have ACS 3.2 with RADIUS set up to allow EAP authentication. The phones only support LEAP, m...

Dear Sir, on my ACS v 3.2 windows server, I have configured group A and created one user in it as B, I want this user B to have helpdesk profile i.e. he should only access show commands but it is strange to discover when B type enable he moves in to ...

Hi all,When configuring NAC i will need to export keys from a CA to be included in the ACS.My CA is a windows 2000 and i have no idea how to export the needed certificate and the keys ??Can anybody help me out here ?Thanks in advanceLasse

All,I am using Cisco Secure ACS v3.3 I have everything set up but I have a need to allow one of my admins to only access the router at his site. Now if I add him to the WAN group he will be able to log into all of the routers on the WAN. Is there a w...

Hello,does anyone know if it is possible to apply an inbound 'vc-class atm 'and also an outbound 'vc-class atm' dynamicaly via a vendor specific attribute. I found 'atm:vc-qos-policy-in' respectively 'atm:vc-qos-policy-out' but that doesn't seem to w...

I recently changed the IP address of my ACS 3.2.2 server, then rebooted the ACS server. My ACS server is using external database for user authentication (Windows NT/2000). TACACS+ configurations are also modified on the Cat3750 switch (TACACS+ clie...

Can it change to chap or anther?它能用CHAP或者ms-chap吗?

I am trying to setup an IP phone connected to a 3560 switch.The port is configured with dot1x.Switch talks to an ACS server for authentication. I cannot get the phone to authenticate and register with callmanagerSwitch config:aaa new-modelaaa authen...

I'm having a problem with our new 1841 routers bypassing the privileged Exec authentication on the initial login. (IOS 12.4(2)T and 12.3(11)T3 w/ACS Ver 3.2(2) Build 5)The following commands work in our other routers. aaa authentication enable defa...

Good morning. We tried to integrate the Cisco ACS 3.3 with Novell ZENworks 6.5 to provide single sign-on for network users. Is it possible? How do we integrate it?

Hi,We're implementing a ACS platform but while doing some tests , I noticed the following : Although DNS is configured the logging appears with an IP address and not with an hostname. Can this be changed ?

Is their a way to set the source address for TACACS?I have about 170 remote sites that I want to use my ACS server (Ver. 3.3) for Autentication/Authorization. I am using 1918 addressing at the remote locations, and at the corporate office. The ACS ...

CiscoSecure ACS V3.3 Failed Attempt message "Bad request from NAS". I was able to log into the device successfully. I have verified TACACS key on both CiscoSecure ACS server and on the router to make sure that passwords are the same. This same fai...

could anyone help telling the exact procedure of configuring user authorization on cisco ios router via acs server.my users are getting authenticated via the acs server but unable to authorize the commands they execute on the ios router.my commands o...