Network Access Control

Hi,Can there be any potential problems, if we want to migrate an existing Cisco ACS Database to a different physical Server (Keeping the same IP information etc) ?We were running Cisco ACS evaluation version for Cisco NAC (CTA) and now want to make i...

I'm attempting to upgrade to ACS 2.3.6(2). I've already upgraded to RSA SecurID v6.0.2. ACS 2.3.6.2 works great with an old SecurID v4.X server I have lying around. It refuses to work with my production SecurID 6.0.2 server. Ideas/comments/empathy we...

Which of the following authorization commands are valid? (Choose two.)A. aaa authentication exec home radiusB. aaa accounting exec home radiusC. aaa authorization default noneD. aaa authorization exec home radiusE. aaa authorization network default e...

when receiving a Radius Disconnect Request (pod), the PDSN replies with a "session context not removable". In the aaa pod debug, i can see that the server found a matching session and issued a kill request. but then the debug shows the mentioned mess...

Does Cisco VPN 3000 work with RSA ACE/Server v6.0? In VPN configuration, only SDI server version 5.0 is available.Thanks.

Can anyone tell me if there is a way to configure IAS or ACS policy to restrict users access to the internet?Thanks

I have an environment with three(3) Aironet 1200 AP's, Cisco 7920 wireless phones (about 12 of them) and about 100 notebooks (IBM T30's T40's and T42's). I have ACS 3.2 with RADIUS set up to allow EAP authentication. The phones only support LEAP, mos...

Dear Sir, on my ACS v 3.2 windows server, I have configured group A and created one user in it as B, I want this user B to have helpdesk profile i.e. he should only access show commands but it is strange to discover when B type enable he moves in to ...

Hi all,When configuring NAC i will need to export keys from a CA to be included in the ACS.My CA is a windows 2000 and i have no idea how to export the needed certificate and the keys ??Can anybody help me out here ?Thanks in advanceLasse

All,I am using Cisco Secure ACS v3.3 I have everything set up but I have a need to allow one of my admins to only access the router at his site. Now if I add him to the WAN group he will be able to log into all of the routers on the WAN. Is there a w...

Hello,does anyone know if it is possible to apply an inbound 'vc-class atm 'and also an outbound 'vc-class atm' dynamicaly via a vendor specific attribute. I found 'atm:vc-qos-policy-in' respectively 'atm:vc-qos-policy-out' but that doesn't seem to w...

I recently changed the IP address of my ACS 3.2.2 server, then rebooted the ACS server. My ACS server is using external database for user authentication (Windows NT/2000). TACACS+ configurations are also modified on the Cat3750 switch (TACACS+ client...

Can it change to chap or anther?它能用CHAP或者ms-chap吗?