Network Access Control

HiI thnk I am being a bit dim here!!I am configuring aaa authentication and I am a bit unsure as to what the line:aaa authorization exec will achieve.The documentation states:"To create a method list to enable authorization to determine if a user is ...

We've encounter the issue of keys as exportable so as adivse from the Enable of https wiht certificate configuration for CISCO ACS Admin Sessions.Can any one give some hought on this matters.We are unable to do Certificate Template to Issue ...??Crea...

We have a problem with the CTA not doing anything on the client machine. While 802.1x environment is up and running the Cisco Trust Agent doesn't seem to do much. I've enabled logging on the agent and from what I can see in the logfile the agent is j...

We have an acs 3.3 solution engine installed. We want to back up all types of logs generated ex. passed authentication, failed authentication etc., and to purge the logs from the solution engine. After purging the current logs we need to start the lo...

I am saving the ACS Reports on the external SQL Server and its working fine. But everytime I need to check the SQL Tables for the generated logs. Is there any option whereby I can fetch the SQL(ODBC) logs from the ACS HTML interface and see the repor...

I have a project My customer want to use Mac Address based Security on their whole network.They want only specific mac addressed pc/notebooks can be connected to their network.But they dont want configuration per switch basis.They wan centralized man...

Hi All,I tried to integrate PIX535 with tacacs, under normal circumstences everything is working fine. But tacacs fails i'm unable to get the login.

I am trying to authenticate my linux users thru RADIUS via Secure ACS 3.3. Local login to linux works fine, but when a user trys to connect via SSH or Telnet, the login fails. The failed attempts log shows "User Access Filtered", the RDS.log shows "U...

Hi,I'm running ACS 3.3 on Windows. How do i configure the ACS to send SMTP notifications if one of my devices have consecutives or reached a threshold number of failed login attemps?I wish to receive an email alert whenever there's a failed attempt o...

Hi all,May I know What is the difference of CSA and CTA?Thanksmak

We're running ACS 3.3.2 and testing 802.1x using PEAP-MSChap (server-side only cert). We have 3rd party certs installed on ACS that include a CDP (CRL Distribution Point). Is there any risk that if we lose Internet connectivity ACS will not allow an ...

Has anyone setup 802.1x per user ACL's on a Cisco Switch?I tried to configure downloadable IP ACL's but not working the documentation says its only supported from IOS ver 12.3(8)T.

Hi to all,We have a problem trying to restrict the access for users to an acces point: All users in any group can access the access point, although the group has a network restriction whichs restricts this access.We have other restrictions which work...

I am trying to use windows IAS for AAA on my cisco devices. RIght now I am configuring the 3550's. I can't seem to get authenticated. Is the "key" in the cisco config the same as the "shared secret" in IAS?

I have configured the acs 3 to authenticate vpn clients which connect onto the pix 6(3)5 and then the acs sends dynamic access lists to the pix according to the user. the problem is that after say 4-5 days no one can connect using the vpn client and ...