Network Access Control

Is there a way that you can force the PIX to authenticate the user(s) who uses the site-to-site VPN? I have no problem with the VPN setup but I want to control who goes through the tunnel by using the PIX local database. With VPN client I can configu...

Does anyone use any freeware servers for aaa. I started confiduring one called FreeRadius (windows version) and I'm aving some issues... Anyway I'm looking for a freeware (preferably windows OS) AAA server. Anyone use anything other thatn the cisco a...

I use Cisco ACS 3.3 version. When i want to configure RDBMS Synchronization i can't see the table "FTP Setup Options". I needed this table to configure FTP with the purpose of adding some user options. Somebody knows the solution for this problem ?

Hi,2 questions:1. if I configured router IOS with aaa as "aaa authentication login default tacacs+ radius local", can I still configured line ( CTY, TTY, VTY and AUX ) with lower level security using "password" and "login"?2. If I used the same aaa l...

Hi!Anyone knows a workaround for changing the tacacs+ port on the routers which are gonna be controlled by tacacs, if the keyword "port" is not allowed on the "tacacs-server host x.x.x.x <port>" for the version running? any ideas beside changing the ...

We use Cisco ACS 3.3 and I was wondering if there is a way to bulk import devices in to the network configuration area instead of manually putting one in at a time?

Hello,Is the MD2 signature algorithm supported on a CSS?Thanks for a response.Kind regards,Kurt

Need help.. I'm trying to cascade a un-managed switch to a parent swith with a dot1x enabled port. IOS Ver of both switches (slave & parent ) are dot1x compliant.Config Settings of my Parent switch:dot1x system-auth-controldot1x guest-vlan supplicant...

Dear All, I am still new to the world of Cisco.I have here in My Network one Core Switch 4506 with 15 Edge Switch 3560.We configure the Core Switch with This Command :- A- ) HO-CSW-01(config)#username design privilege 15 password kabdesignB- )HO-CSW-...

I've had some problems with the ACS v3.3(1) overall in the night and/or weekend when the activity is low. the log thath shows me is the follow: "Failed to connect to any Windows authentication agent"When it happens I restart the CSA agent and it work...

Hi,I just want to confirm that to scramble the TACACS key on show run display, you put 7:(config)#tacacs-server key ?0 Specifies an UNENCRYPTED key will follow7 Specifies HIDDEN key will follow LINE The UNENCRYPTED (cleartext) shared keyService passw...

Hi allI am planning to authenticate ssh logins to Solaris 8/9 systems using PAM and radius (while radius is considered the primary solution, tacacs+ could be used, too). The radius/tacacs+ server is provided by a Cisco ACS. Can anybody out there conf...

Trying to setup max session to limit the number of concurrent connection a user can have to a AAA device. The user Max session is set to 3 but does not seem to have any affect. Accounting logging is using TACACS+ Accounting reports with start and sto...

HiI have been reading the threads on NAC, but only one of them was similar to my issue. Unfortunately, the suggestions in there did not work. Hence this post.SCENARIO: I am setting up a test lab for NAC deployment for one of our clients. I am using t...