Network Access Control

Is their a way to set the source address for TACACS?I have about 170 remote sites that I want to use my ACS server (Ver. 3.3) for Autentication/Authorization. I am using 1918 addressing at the remote locations, and at the corporate office. The ACS se...

CiscoSecure ACS V3.3 Failed Attempt message "Bad request from NAS". I was able to log into the device successfully. I have verified TACACS key on both CiscoSecure ACS server and on the router to make sure that passwords are the same. This same failed...

could anyone help telling the exact procedure of configuring user authorization on cisco ios router via acs server.my users are getting authenticated via the acs server but unable to authorize the commands they execute on the ios router.my commands o...

Hello,how can i manage/observe a 'Cisco Secure ACS Solution Engine'? Ich found no things like SNMP etc.regardsKarsten

Hi alli am using freeradius with mysql for authentication the ADSL users.My LNS router is Cisco 3600.Everything is fine but i want to give static IP address to my users.my router config is:interface Virtual-Template1 ip unnumbered FastEthernet0/1 ip ...

I have configured download acl in a Acs 3.2 for apply it in the 3750 with 802.1x at the ports. The authentication 802.1x is working fine but I am not getting downloadable acl from the acs.I am getting the next debugs:Received QUEUE EVENT in response ...

Hi,I have ACS version 3. We would like to create a priviliege for the user, who can be able to only reset the passwords for other user profiles. His access is limited only to reset the passwords & restricted to other super user priviliges.Can any one...

Since Netscreen firewall only supports RADIUS authentication, is Cisco ACS server able to support it? If yes, which version and where can I find more info about it?

I have a cat6509 configured to talk to Radius server (ACS), as I understood that the IP address used by Cat6k to talk to ACS is by using the nearest interface ip, can i explicitly specify the source address used by Cat6k in this case ? thanks in adva...

hello allFor the last 18 months or so there's been a steady stream of folks trying to get dynamic assignment of a vlan to a user/group using Microsofts IAS Radius.Having searched thru the Netpro archives, I've never found a definitive explaination of...

Hi,We have been doing some test on our 3560G switch with 802.1X. The switch port has a Cisco IP Phone 7940 connected and at the back of the IP Phone is the PC (802.1X client).The PC authenticates with the computer name or the username properly withou...

Hello !Could you please help ? we have cisco3640 as nas, cs acs 2.6 as radius-server.Now we would need to forward authentication request to another radius-server ( username is unknown to the acs) Username is provided with a certain prefix and accordi...

Hi, I have an issue with ip pool server feature of cisco acs 3.2.x.Tha ACS server has 2 aaa clients, a vpn concentrator and a cisco ras 2522. I'd like to use in cisco secure acs an IP pool for the ras and an IP pool for the concentrator.The user logi...

I am tring to implement dot1x authentication and have configured my 2950 Switch as follows:aaa new-modelaaa authentication dot1x default group radius!interface FastEthernet0/13 switchport access vlan 680 switchport mode access dot1x port-control auto...