Network Access Control

I am using the csutil -i command to complete an update and move users from one group to another. The text file has the UPDATE:<user name>:PROFILE:7 syntax and works great as far as you can see on the ACS GUI. However, when you run a csutil -d, the ...

Hi,I have a 6509 switch running 6.3(5) and I have tried to set up command authorization to only allow certain users to see the configurations. I've set it up in a IOS based 6509 with success but so far unsuccesful with the cat os based 6509. It see...

Hi There,I want to know if there is a way of backing up the CiscoSecure databases automatically and for the backup to be an incremental backup to another CiscoSecure server without shutting down the original Database?I have scoured Cisco.com for answ...

Hi,I have a customer with a Watchguard firewall. They have an interesting feature in that they can http (or https) to the inside interface address on port 4100. This throws a username/password applet back to the user. When authenticated (done loca...

I have a PIX 515E v6.3.3 that is currently in place and has statics and an access list on the outside interface to allow http and smtp access in to the mail & web servers.I now have a need to allow an deveoper ftp access to the web site for posting c...

Hi,We have done some testing with 802.1x on IOS 12.1(13)EA1c on Cisco 3550 switches.If the switch does not get an answer from a radius server, then it will retry after some period.There seems to be a timer in the switch that has some influence on thi...

I am trying to setup 802.1x authentication for our wired LAN. I have MS IAS server as a radius server and Cat3550. I want to use PEAP. Do I need to install certificates on both the IAS server and the Windows client? Thanks.

I haven't had time to dig into this yet. Has anyone experienced this recently? No config changes in the past 90 days but this weekend i started getting spammed about every 6 minutes with these messages.Alert from ACS1 on Feb 01 2005 at 16:31Test Time...

Is it possible to use Machine Certificates with a LDAP Database in a 802.1x environment?

I have been assigned this task of enabling AAA for all our network equipments (switches and routers) and to use TACACS+ server. I havent had any experience in setting TACACS+ before but currently we are using RADIUS for our dialup users.aaa authentic...

My textbooks don't seem to agree on this one issue. One of my textbooks say that you have to use TACACS+ for some features like cut-through proxy or virtual http, where another says you can use RADIUS for any AAA implementation. Could someone tell me...

Hi,What magic stuff do i need todo to get"radius-server attribute 32 include-in-access-req format kn01_%h" to work in Cat3560 12.2(25)SE?(Attribute #44 works but i dont need this, only test)3560#sh run | inc radiusaaa group server radius rad_adminaaa...

I have a problem with user changing password on cisco secure ACS using the browser. when you get to the login page, and you supply the log in username and current password, it takes you to the page to change the password but only staysthere for some ...

We have set up guest internet access in our enterprise using GRE tunneling with a PIX. I'm trying to determine the best way to do authentication for users on this guest network. I think I can do RADIUS (using ACS) with the PIX as an NAS. Question is...

I am trying to allocate a primary and secondary DNS server ip address to VPN clients within the group settings. These clients are termination on a Cisco 7200 Router. I am able to allocate an ip address from the dhcp pools fine, but I am unable to get...