Network Access Control

hi,we are using ACS TACACS for our cisco devices telnet security, but we also using DC database for authentication and if it database goes down, authentication stopping. at this time cisco device still searching for tacacs server and does not allow t...

It seems as though, when running Cisco IOS/ACS on Win2K, you can only lock a individual down to user exec, prvi exec, but once they are allowed into global configuration they can access everything. The question is, does acs allow you to only allow c...

Is it possible to setup an Active Directory external database on the ACS server using the "Generic LDAP" type? Or do I have to configure it as a "Windows DB" type?I am using PEAP authentication, and have it all working great, just having trouble set...

I'm going to migrate our ACS software to another server with other programs installed than the current server.I'm trying to find any documentation if there are know problems with other installed software on the same server as ACS, but can't find any ...

Hi, I would like to know how to change the tacacs enable password via telnet session. When a new user login the first time via telnet, tacacs prompts the user with changing login password. However, it never prompts to change the enable password. Pl...

I have taccas config on a 1700, i want to come in trough the serial interface but i can not authenticate. i seems that i works only on the fastehternet. I can i config tacacs so the it also works on the serial interface?

I am using the csutil -i command to complete an update and move users from one group to another. The text file has the UPDATE:<user name>:PROFILE:7 syntax and works great as far as you can see on the ACS GUI. However, when you run a csutil -d, the ...

Hi,I have a 6509 switch running 6.3(5) and I have tried to set up command authorization to only allow certain users to see the configurations. I've set it up in a IOS based 6509 with success but so far unsuccesful with the cat os based 6509. It see...

Hi There,I want to know if there is a way of backing up the CiscoSecure databases automatically and for the backup to be an incremental backup to another CiscoSecure server without shutting down the original Database?I have scoured Cisco.com for answ...

Hi,I have a customer with a Watchguard firewall. They have an interesting feature in that they can http (or https) to the inside interface address on port 4100. This throws a username/password applet back to the user. When authenticated (done loca...

I have a PIX 515E v6.3.3 that is currently in place and has statics and an access list on the outside interface to allow http and smtp access in to the mail & web servers.I now have a need to allow an deveoper ftp access to the web site for posting c...

Hi,We have done some testing with 802.1x on IOS 12.1(13)EA1c on Cisco 3550 switches.If the switch does not get an answer from a radius server, then it will retry after some period.There seems to be a timer in the switch that has some influence on thi...

I am trying to setup 802.1x authentication for our wired LAN. I have MS IAS server as a radius server and Cat3550. I want to use PEAP. Do I need to install certificates on both the IAS server and the Windows client? Thanks.

I haven't had time to dig into this yet. Has anyone experienced this recently? No config changes in the past 90 days but this weekend i started getting spammed about every 6 minutes with these messages.Alert from ACS1 on Feb 01 2005 at 16:31Test Time...

Is it possible to use Machine Certificates with a LDAP Database in a 802.1x environment?