Network Access Control

I am using the CiscoSecure ACS v3.3 build 11 on Windows to handle authentication of some network devices. I had added in a VSA for our 3Com 4400-series switches which allowed us to authenticate against our Windows AD for administration of the switche...

I'm having a problem getting in SDM through tacacs (acs 3.3) Logging in via CLI (tacacs) works fine. When i put http authentication to local all works fine, I'm using the following sttings:!aaa authentication login default group tacacs+ localaaa auth...

I have a VNP concentrator, an ACS 3.2 server and a Novell eDirectory tree. My goal is to allow my VPN users to use their Novell name and password to log into the vpn or webvpn.I currently have my concentrator use an external RADIUS source for authent...

HII am configuring command authorization for our FWSM and switches. I seem to have it working OKish for the FWSM but I think I´m nissing something as far as the Switches go.I basically have a user in a group which I have configured as follows under "...

If you have an ACS aplliance and do you want to use a base of external data base Activate Directory, it´s necessary install an agent where it be been located the Activate Directory, If you have more Activate Directorys installed it in other machines ...

I would like to perform the following in our environment. I currently have CS ACS Appliance v3.3. I plan to install CS Remote Agent on a Windows 2003 Domain Controller for the backend authentication database using A/D.Goal: I want to use the ACS to p...

R5 dials R2.R2 is supposed to authenticate R5 and then callback to R5.So far I see that the problem is the ACS tacacs+ server. Authentication failed...03:52:55: TPLUS: Using server 10.1.1.10003:52:55: TPLUS(00000070)/0/NB_WAIT/65435178: Started 20 se...

Hi All,Pls tell me how to restrict the IPs for telnet and for limited commands.

I have an ACS box that is working properly and you can administer it remotely from any device except behind an 831 doing VPN to the host site. I have looked through the ACS and there are no IP or Port restricitions. Ocassionaly it will actually log i...

Hello all,I am setting up a 3560 switch to talk on our network. It has a routed port (gig0/2) and will talk to 2 other routers on our network. Anyhow I am currently purplexed as the 3560 just will not talk to the others. This is at our main site and ...

I have a requirement for audit LAN switch admin access for 3550's & 2950's. I also have a requirement to lockout an admin account upon 3-5 invalid logon attempts. The account to remain locked out until re-enabled by another admin.Is AAA and TACACS wh...

Hello,does anybody know if it is possible using aaa and privilage level commands to let a user to configure a specific interface on Catalyst 2950 switch (IOS version 12.1(22)EA4) ? For example, a FastEthernet interface but not the Giga interface.Than...

I have setup auth-proxy on a 2651 router that contacts the cisco ACS using Tacacs+. On the Cisco ACS i am currently using the ciscosecure database currently. I have a cisco 1130AG wireless AP that provides wireless access to our users. The 2651 is al...

Hi,I have Cisco ACS 3.3. I have a PIX 525, version 6.3(5). I have the PIX authenticating in TACACS, configured on the ACS box.But, the PIX logons don't appear in TACACS Accounting Log on the ACS box. I have a 6509 (catOS), and a 3745 (IOS 12.3) doing...