Network Access Control

hi!i configured vpn on pix firewall.easyvpn server.but, after configuring vpn, only one people connet private network with vpn.another people want to connet private network , but do not permit login.my configuring isvpngroup xxxx address-pool vpnpool...

Hello I'am testing acs3.2 with peap using a certificat initiate by a windows 2003 DC CA .And the model of certficat "web server" can't be modified for "mark keys as exportable" ,so for Microsoft the entreprise edition of windows 2003 is needed ! With...

I configured VPN with 1760. When I try to connect 1760 from Window client, 1760 doesn't allow me to come in.I attached the debug (debug crypto isakmp) file from 1760.VPN Client is 10.10.10.10 and 1760 is 10.10.10.9I put user name and password 3 times...

Ok I am using ACS for RADIUS authenticationm, the ACS then uses AD to authenticathe the users as they are not avalible on the ACS itself,the ting is that I want to be able to speify a static IP address for the user, I can do this in AD but it does no...

Hi All,We hv a cisco ACS3.0 in our network authenticating dial-in ras clients.Now we want to implement management level radius authentication for switches in our network.Since all the switches are non-cisco hence under ACS configuration we configured...

We are trying to set-up a new CCA system to use our NT directory services as an LDAP authenticator.We are trying to duplicate the working set-up from a test system that we had in-house, but it is incomplete. Unfortunately the test box is now gone.Thi...

I have configured windows server 2003 as IAS, 2950T and a winXP workstation for 802.1x AAA, but i get the Attribute pair (4142,22) in IAS log file which is not defined in docs and authentication is not done. Switch software is 12.1(13)EA1.

HI,I could not able to autheticate through acs 3.3 on windows xp client, ACS is connected to core sw 4006 and my client is also connected to same sw.when I debug dot1x I got this message. could anybody tell me where is the problem. " 4w0d: dot1x-ev:D...

We have a VPN 3030 (WebVPN Feature) using an ACS 3.3 (Radius) for the user authentication. The ACS uses 2 external domain for the authentication (DOM1 and DOM2) and both domain are mapped to ACS group. In the ACS we use the radius attribute (Class 25...

Hi,Wants to export a database from a ACS server to another external Databasse.The only problem is that we wants to see not only the usernames in clear text also the passwords.So in short, we want to decrypt the passwords to plain text.Is this possibl...

Hi guy,I'm working on the SSG 12.3(4)t4 sesm 3.1 and ACS 3.2after pass the authentication and already login the attribute is sent to the SESM but the debug massage is;00:02:44: RADIUS: Received from id 21645/3 192.168.0.102:1812, Access-Accept, len 1...

I was under the impression that I installed ACS 3.3 on Windows 2003 Server. However, after it was all installed, I went to ACS Admin web page and the only thing that comes up is a blanks screen. I obviously did something wrong be it configuration or ...

We use 802.1x with PEAP for all our students and personell over WLAN and wire and it works excellent. However - our central catalouge will be an LDAP-server and since LDAP can't process chap we must get accounts into the ACS 3.3 another way. One way ...

Hi,Can dynamic vlan assignment works across WAN (ACS3.1 is in HQ site)?e.g. in HQ we have 2 VLAN mapped to SSIDs. This is not a problem as the ACS knows that VLAN 10 & 20 exists in the network and assign it respectively based on the Cisco ACS configu...

Hi allWe are experiencing problems with our ACS server, whereby the CSTacacs services fails and the following errors are generated in the 'Event Viewer':1) From the 'Application Log', in 'Event Viewer':CSTacacs could nto be started. Failed to initial...