Network Access Control

Hi Everybody.I have 4 zones in my pix configured . Outside, inside, remotezone, dmz. I have my 2RAS boxes sitting on the remote zone. I need to make these boxes to send authentication request to acs sitting in the inside zone. If i say radius server...

Is there a way to upgrade ACS 2.4 to ACS 3.3 preserving the user and group databases ?Maybe I have to follow a path like 2.4 to 2.5 to 2.6 to 3.0 to 3.3, but I don't know.A hard upgrade from 2.4 to 3.3 doesn't give the wanted results. The installing...

Hi,I cant find the commands for guest vlan configuration on my switch. I have a 2950-24 with Standard Image.Can you help me?

Hi I’ve got a weird problem with authentication on a PIX 525 with 7 interfaces and OS version 6.3, I’m using Cisco Secure ACS, 3.0, for authentcaiton.. . I’ve got two Squid proxy machines on the network which comprises the outside interface of the PI...

I've set up a second ACS server and was successfully replicated the database. But when I tried to enable PEAP Authentication under Global Authentication Setup, I get an error:"Failed to initialize PEAP or EAP-TLS authentication protocol because CA c...

I have a C1760 with vpdn so remote users can do pptp-vpn to the branch office trough Internet.I have set-up the Ms Internet Autentication Services to act as AAA server, and the users correctly authenticate.I am now trying to see if the accounting ser...

Is it possible to use ACS to assign static IP addresses to VPN users where the external user database is AD?User <---> VPN <---> ACS <---> AD

HelloI need to get a list of users and the last time the connected from the Radius Accounting log. Does anybody know about tools that handle these logs and that can generate reports and stats?

Why the Passed authentication report empty?!! while the failed report o.k.i try to access routers with correct authentication through tacacs and the passed authentication report empty, while i try to put incorrect credential and this tries appear at ...

I have three domains, Domain A (NT 4.0) Domain B(NT 4.0) and Domain C (Active Directory). the ACS works for a Cisco Access Point (LEAP).The ACS is member of Domain C (W2000). and Domain A ans C are on the same LAN. Domain B is connected trought...

ACS cannot Authenticate Aironet Users against Exernal DB (LDAP)Can anyone point me to a technical explanation of why this is true? All I have found so far is one small note in a help file and something that might be related under EAP-FAST explanatio...

Is there any way to export to a file the list of users with non-encrypted passwords? I have to migrate the list of users to another Radius.Thank you in advance

Hello,I have repeatedly made the experience that when mirroring a port with 802.1x enabled, SPAN-function does not work properly. When the problem occurs (it does not each time), I seem to only get broadcast-frames, but no unicast. One time I could s...

hello, I have following configuration: Catalyst 2950G-proximity switches with IOS 12.1(19)EA1c. Cisco Secure ACS Appliance 3.2.3.11 SunONE Directory Server ldap server version 5.2_Patch_2 I am trying to setup 802.1x authentication for wired and wirel...

Dear all,802.1x can only apply access control on user level, i.e. that user can use any pc/notebooks to gain access to network.How about per device level? using MAC address control can be a choice, but it is not scalable as it increases admin overhea...