Network Access Control

I setup a radius server to apply aaa on routers and switches.In routers, using local privilege and work well. In switches, it just gets into exec mode. When I set radius profile, just one 6509 can become enable prompt, others fail.I checked the versi...

Hi,I've few questions on TACACS+ (ACS) and RADIUS (CAR):1. Which is the preferred communication method between TACACS+ (ACS) with OID? Is it Generic LDAP or ODBC? Basically, the TACACS+ will just forward the AAA request from NAS to the OID.2. If poss...

Hi,Does anyone know how to test the performance of ACS Appliance (ACS 3.2) ?According to the manual, the "transactions per second per number of users" is 80 RADIUS full login cycles (auth,account start,account stop) per second with 10000 users in the...

HiWe have two server RADIUS on the network.The first is the primary and the second the secondary.But a part of the trafic go to the secondary.How to configure the system if I want all the trafic go to the primary ? and how to configure the system if ...

hi,how do you enable the accounting the view/capture of this particular vsa on ACS.via a debug, i can see this attribute being sent to the radius server, but i looked for this particular att within the acs and couldn't find it. i could not find how t...

Hi !We would like to implement a redundant TACACS solution using Cisco`s Secure ACS. Do you know whether this can be done with this kind of software ?(Failover, Database synchronisation and so on... )Thx in advanceHans

We are using VPN 3.x clients to connect to a PIX 515 with radius authentication from windows active directory. Is the password encrypted when the user types in the VPN client and get sent to the PIX? Is the vpn tunnel already formed before transferri...

I am trying to protect IIS web server from attack with RADIUS on a PIX and when I try to use aaa authenticate HTTPS xxx.xxx.xxx.xxx outside 0.0.0.0 0.0.0.0 I get a warning on the client browser about the certificate on the PIX. I do not have a certi...

Does anyone know if you can authenticate (XAuth) a VPN client terminating on a PIX FW to a local AAA database?I heard that it would be available in PIX v6.3.3 but haven't heard of anyone using it.It would be nice to authenticate individual users (for...

I would like to know if it is possible to apply dynamic access-list per user using the RADIUS protocol. To be more specific, I am trying to setup a Router as a "Proxy" telnet. A user will access the router by telnet and from there will initiate a tel...

Hi All:I want to implement 802.1X, But i want to authetication user name bind user macFor example Alex had one computer mac is 00-00-00-00-00-00 he can authetication with his mac promptly , In someday , Alex carry another laptop , mac is 11-11-11-11-...

Hello,for a test I have a dial-out utility (dialoutEZ)so the user can dial out via a modem in a 3640 router. But the user is able to change the telephone number. I have also installed ACS (3.2) and now want to control the dial-out telephone number by...

Hi,We run Cisco Secure ACS on win 2000. We have recently given restricted access to our IT division to change port speeds and duplex on IOS and CatOS switches. We have restricted the commands they can enter using the Shell Command Authorization Sets....

Hi. I really hope that someone can help me with this issue.I'm trying to use Cisco Secure ACS v3.0 to authenticate users in a SIP Proxy Server(SNOM 4s). I'm a newbie using ACS but this is what i did...First: i defined a AAA client call SNOM, with t...