Network Access Control

I'm istalling a 3745 Router with IOS release 12.3(8).T6, in order to support the new NM-CE1T1-PRI Cards and replace an old AS5200 access server.I need to configure virtual profiles for dial-in multilink users, and want to load some additional paramet...

Hi, I am using a cisco 3560 switch and IAS for authentication. Everything works fine i can be assigned a VLAN etc however how can i get the client's machines to automatically authenticate after logging in to their machines?A problem exists.. at boot ...

I have everything configured according to Cisco documentation, but I am getting two different errors in ACS's log.For a user it says: External DB account RestrictionFor a machine it says: EAP-TLS or PEAP authentication failed during SSL handshakeDoes...

My scenario is as follows. I have two groups of users who are dialing to AS5300 and authentication is done on the ACS. The ACS is assigning some users the static ip addresses and some users get ip addresses from the pool. If the user who does not hav...

Hello,We got a customer who want to allow some user (around 10) to access to the Internet and some not. So I was thinking auth-proxy may be the good solution.But is it possible to make a script (any config example?) who will allow the permitted user ...

I am running Cisco Access Registrar and I need to run a tcl script as a UserGroups' AuthorizationScript, but it never seems to be triggered. The idea is to have a script which will check a user's group against the number that they dialled and accept ...

HELP!My config looks right but I am unable to assign VLAN dynamically via 802.1x. Attached is my config and debug.

Hello, Here is what I am tring to do: a Windows XP client is authenticating via 802.1x to a cisco switch. The switch "talks" to a IAS radius serveur (microsoft). That works fine, the user can login and the port opens up. Cisco developed a feature in...

Hi All,I have a microsoft isa radius server for authentication (server 2000), and will be using either a 2811 or 506e for VPN clients using the cisco VPN client for remote access. I need to set up authentication between the router or firewall and th...

Hello All,I need to disconnect dialup users after 1 hour - limit session. Using ACS 3.3 RADIUS config. Looking at the RADIUS attribute [027] Session-Timeout to do this. ACS documentation indicates this does not support PPP sessions. However this l...

Hello,I have this problem: I have some users, who connect to PIX-515 (OS 6.3.4) by Cisco VPN Client. Xauth is provided by ACS 3.1. It is works well. But now I need divide users to 2 groups and each group will have different ACL for access to inside n...

The matrix shows clear text/PAP, PEAP and EAP-FAST phase 2 as authentication types. How do you tell ACS to use clear text/PAP? It is not a choice in the "Global Authentication" setup section. Is there any info on what has to be done on the Novell ...

I have a site where users connect to a 3005 concentrator using PPTP authenticating to ACS 3.0.Users can only connect when they dont have MSCHAPv2 disabled on th PPTP connection, and when I enable MSCHAPv2 on the concentrator they are unable to connec...

Hi, I created a shared profile for limited access for some temp employees. Everything works fine for IOS devices but CatOS. Regular login was fine but when I enter enable, it showed 'Command Authorization Failed'. I did choose the Level 15 under En...