Network Access Control

I am importing users from a Shiva Access Manager AAA server and all of the user's passwords are encrypted with the Shiva PAP (SPAP). Has anyone ever migrated from a Shiva Access Manager AAA server to a Cisco ACS AAA server?

With password aging policies implemented why would my account on our ACS (v 3.2) be listed as disabled because "This user's passwords have expired" if I use a RSA Securid Token Server for password authentication and the TACACS+ Enable Password? I can...

I need help on the following please.1. - I am using ACS as TACACS server to control IOS authorization on all our Switches, However I can not deny telnet sessions to other devices from within CatOS - does anyone know the command authorization set to d...

I have a pix 506 for user remote access with pptp andcisco-vpn-client.The remote users are authenticated with a cisco acs 3.2When the remote user connect with cisco-vpn-client i see the caller-id in the radius accounting page on the acs , but when th...

Hi,,,I have the following error at the ACS ver 3.0 (Problem Authenticating from CSRadius. Got as far as Launching Request to Protocol Module..) caused the service to go down, the server did not respond to any AAA client (TACACS or RADIUS), i ping to ...

I will be upgrading a server from 3.0.1 to 3.3 and need to know the steps and expectations. What is the prcess of upgrading an ACS server from 3.0.1 to 3.3 and what type of problems should i expect.

Hello there...I'm having problem to configure the AAA server in my PIX506e, when i entered the following command, i can't access the firewall's pdm with correct password.#aaa-server AuthPIX protocol tacacs+#aaa-server AuthPIX (inside) host 192.168.1....

We're configuring a Dial-in access authenticated by Microsoft 2003 IAS Server.Here after the configuration :aaa new-modelaaa authentication ppp dialins radius localaaa authorization network default radius localaaa accounting exec default start-stop r...

hi,I would like to use tacacs+ on my pix 525 and I would like to know if there is an alternative to CSACS?I need something that I can install on 2 servers with replication option. I know that CSACS does what I want but I just wanted to know if there ...

I've the following problem.I'm trying to configure a RADIUS + local authentication for both telnet and dial-in access.So I've configured the router with the following linesaaa new-modelaaa authentication login default radius localaaa authentication p...

I am trying to authenticate users in a Catalyst 2950 against a ACS 3.2.I have deploy Active Directory.I need to authenticate users against this active directory but i have to use without certificates.Any idea?

Is it possible to block HTTP Basic Authentication packets in a router? Here is my problem. An internal website that uses unencrypted basic authentication works from every location but one. When I sniff the network on both sides of the router the pack...

I have stack of 2950 switches with TACACS configuration. I have user helpdesk with limited restricted right ( Shell authorization set)in ACS 3.0 config. My problem is that helpdesk user can run any any command on member switch when he issue rcommand ...

Can I replicate user and group databases from ACS for Windows to ACS Solution Engine ? I'm using the same version (3.3) and the same path.Tks.