Network Access Control

I have a switch setup to use radius. I have the aaa-new model list applied to my console and telnet ports, but they only work with pap. If I try chap in my remote access policy, login is not allowed, and the radius server's event viewer reads, incorr...

I have configured my pix to authentication using tacacs first; if tacacs is not available it must fall back to LOCAL authentication. The TACACS authentication works fine, when I take out the ACS from the network, the local authentication works as wel...

Hi All,I have configured dot1x authentication on 3750 switch and configured a Windows 2003 radius server as an authentication server. When running debugs aaa and dot1x, I do see the reject coming from the Windows Radius server. It says length of pack...

Is it possible to run EAP-FAST for WLAN clients only and EAP-PEAP for internal LAN clients only?I don't want wireless users authenticating in PEAP.

Within ACS when adding a user there are 5 fields called Supplementry User Info. Those field names are defined within Interface Configuration, User Data Configuration. The question is: Is it possible to populate those fields while doing a ADD import...

I need help on the TACACS+ accounting is not registed on the log tacacs when I telnet to the MGX.

Hi,Can there be any potential problems, if we want to migrate an existing Cisco ACS Database to a different physical Server (Keeping the same IP information etc) ?We were running Cisco ACS evaluation version for Cisco NAC (CTA) and now want to make i...

I'm attempting to upgrade to ACS 2.3.6(2). I've already upgraded to RSA SecurID v6.0.2. ACS 2.3.6.2 works great with an old SecurID v4.X server I have lying around. It refuses to work with my production SecurID 6.0.2 server. Ideas/comments/empath...

Which of the following authorization commands are valid? (Choose two.)A. aaa authentication exec home radiusB. aaa accounting exec home radiusC. aaa authorization default noneD. aaa authorization exec home radiusE. aaa authorization network default e...

when receiving a Radius Disconnect Request (pod), the PDSN replies with a "session context not removable". In the aaa pod debug, i can see that the server found a matching session and issued a kill request. but then the debug shows the mentioned mess...

Does Cisco VPN 3000 work with RSA ACE/Server v6.0? In VPN configuration, only SDI server version 5.0 is available.Thanks.

Can anyone tell me if there is a way to configure IAS or ACS policy to restrict users access to the internet?Thanks

I have an environment with three(3) Aironet 1200 AP's, Cisco 7920 wireless phones (about 12 of them) and about 100 notebooks (IBM T30's T40's and T42's). I have ACS 3.2 with RADIUS set up to allow EAP authentication. The phones only support LEAP, m...