Network Access Control

I have setup shell commands for the helpdesk to do basic viewing of the router. Is there a way to limit what they can do in config mode and how do i configure that on the ACS. For instance if I want the helpdesk to enable a port on a 3560 switch. Th...

Hi all,I'm trying to let ,external users from a trusted domain,authenticate on the ACS via dialup.I've configured the unknown user policy, and database mapping.Only local users from the domain in which the ACS server is in can authenticate successful...

Hi All,I'm trying to get CDR accounting working, but it's not.Here's my configuration...aaa new-model!!aaa group server radius ACS server X.X.X.X auth-port 1645 acct-port 1646!aaa authentication login h323 group ACSaaa authentication login no_rad loc...

Hi,I am trying to use this feature but it is not working. I mapped different attributes, for example i mapped one column of my oracle database to the Session-Timeout attribute but when the user is authenticated the Access-Accept doesn´t have the Sess...

Hello all, I am trying to configure aaa using TACACS+ for PIX 520, i am not able to close. Problems are1.It dosent ask for username /password in first level.2.on second level it asks for user name it dosent authenticate the user .Cud u pls let me k...

Does anybody know of a good piece of software that allows me to authenticate my VPN connections through Active Directory? I'm trying to create a central point through my domain by forcing users to authenticate through Radius or Tacacs+ that uses Acti...

At present running ACS 3.0 on an NT4 server. I want to upgrade to ACS 3.3 on a Win2k server. Can I backup my 3.0 configuration and import it to the new server?Thanks

Hi, I'm confuse with the licensing on the following product: 1) User Changeable password 2) Windows remote agent I have one ACS Solution Engine with the installation files for UCP utilities and windows remote agent which included on recovery CD. Do ...

I have enabled a Radius server to gather AAA Accounting CDR records but I don't see any of the Cisco h323 attributes. The following is an example of the list I WANT to see.ATTRIBUTE h323-remote-address 23 string CiscoATTRIBUTE h323-conf-id ...

Hi,I have configured the aaa authentication for the PIX with tacacs protocol (ACS Server).It works fine, now i would like to add the back up authentication, as follows:- If the ACS goes down i can to be authenticated with the local database.Is it pos...

Hello all,I'm running Windows 2003 Server (Enterprise). I installed the eval version of ACS 3.3. The installation process was successful. However, the CSAdmin service does not start. There is an Event Log error that states:Failed to initialize AAA Cl...

Dear Sir/Madam,I need config PIX 515E for VPN, I want that I can use windows 2000/xp connect to internet after that access to my private network.I configured as follow but I can't access to my private network:"PIX Version 6.3(1) inte...

Hi, I 've a customer who has an Activcard server which is used for RAS.We've implemented an aironet architecture based on a PEAP MsChap V2 authentication (because the client want to use the supplicant from Microsoft and want strong authentication). T...

Hi All,I'm trying to get CDR accounting working, but it's not.Here's my configuration...aaa new-model!!aaa group server radius ACS server X.X.X.X auth-port 1645 acct-port 1646!aaa authentication login h323 group ACSaaa authentication login no_rad loc...

Hello !Could you please help us. we have acs 2.6 and we would need to move or copy user/group and parameter data from acs to windows 2003 ias-server.Is this possible for example via rdbms synchronization ? Or via csutil ?Any help is appreciatedThank ...