Network Access Control

Hi,I'm trying to implement a scenario where i want ACS to receive a certain integer of session_time passed by ODBC database. I don't know if ACS is restricted to receive only the error code and group-ID (pap case), and a string to gog purposes? Or if...

hello all . I have 2 pools of IPs on the router ans have dialup vdpn sessions on it , I need some specific users get from a pool and other users from the other pool. Can I return the pool name in the radius reply when the user is authenticating ? and...

Hi AllCan anyone tell how do we use UCP for Cisco 1111 ver 3.2 appliance.In the Cisco recovery CD which i got a i dont find a UCP exe.How do i get it installed on the Cisco 1111 appliance ?ThanksSumsi

Hi There;I have recently been thrust into a project involving a Windows AD server running "Cisco Secure ACS for Windows (v3.1)", and a need to upgrade it to v3.3. A Cisco 3000 series VPN Concentrator is currently configured to use the above Windows h...

Hi NetPro,Currently, i am facing some problem which is Firewall Authenticate with Cisco ACS. i've added the command "aaa-server AuthInbound protocol tacacs+" and " aaa-server AuthInbound (outside) host 172.17.xxx.xxx cisco timeout 5 "but, still cant ...

Hello,Is there anyway to assign Polies like 'Access Control List' to user basis instead or IP base? Thank you

I currently have in place CS ACS Solution Engine v3.3.3 and the Remote Agent is installed on Windows Server 2003. I'm using a lab environment to test Authentication to network switches and routers using ACS as Radius with Windows A/D as the backend. ...

It's possible create downloadable ACL in ACS 3.3 to restrict PEAP users access?AP Ios version is 12.3(4)JA.Thank YouLaura

Hi,Got a server running ACS v3.3 talking to a SecurID ACE server. When I set a user up to use SecurID, ACS always reports "CS user unknown" - when the user is plainly in the database. If I change user back to use Internal auth - it works a treat. If ...

Hello Guyz,i am having issues with my tacacs server. We implemented AAA using linux based tacacs on our 35 around routers and swicthes. On our few Cisco 3700 series routers AAA doesent seems to work. It asks for username/password and then fall back t...

Is it possible to have a backway into the PIX should the AAA server fail ie Console port access?Currrntly we use AAA authentication, authorization and accounting with out Tacacs server. Pix configured as follows:aaa-server TACACS+ protocol tacacs+aaa...

I'm trying to configure my devices to use shell command authorization sets located on my ACS box. I want users that are members of a specific group to only be allowed to certain commands (ex. show). I'm pretty sure my ACS box is setup correctly, but ...

Hi,I'm currently testing with Cisco's SDM interface combined with Cisco ACS authentication using rsa secureid. Tests without the rsa securid, just a username/pass combination all works well, however combining the securid, sdm keeps popping back up. C...

Hello. We know about the ipsec:inacl attribute for configuring split-tunneling for a VPN group, but AFAWK you must define the ACL in the local configuration of the router. Is it possible to define the ACL in the RADIUS server instead? How? By the way...