Network Access Control

Hi allWe are experiencing problems with our ACS server, whereby the CSTacacs services fails and the following errors are generated in the 'Event Viewer':1) From the 'Application Log', in 'Event Viewer':CSTacacs could nto be started. Failed to initial...

Hi all,a customer is using NAS to dial-out downloading profiles from a ACS server. The authentication succeeded, but the authorization fails and display the error: AAA/AUTHOR/LCP: Unsupported Service-Type: 3. No supported types foundConfiguration in ...

Hello,I need to know if it is possible for ACS to attribute an IP address to the VPN Clients connected to a VPN Concentrator, with XAUTH, instead of the VPN Concentrator,and if yes : how can I do, what is the procedure ? With the attribute Framed IP ...

Dear All,Do you know what is the default login username and password for ACS v3.2?Besides, If I forget the password, is there any password recovery procedure for ACS?Thanks.C.K.

Hello,For a specific scenario I need to authenticate an user without using the built in SESM controls.I am trying to use the provided API and I get the following error:No account for the identities "{radiususer=cisco}" exists.The code running within ...

Using Cisco VPN client 4.6.03.0021 on Windows XP SP2 to a Cisco VPN 3005 concentrator 4.7 release. Concentrator is not behind NAT, client is. We're using simple authentication with usernames/passwords via Active Directory/Kerberos.Most of my users ha...

Hello,i have a Problem with the Radius Accounting.In my Network i have a Cisco ACS 3.3 where the Users will connect via Intraselect (Dial-In Telekom Radius Proxy). The Radius Authentication (Port 1812) is ok (Radius Request, Cisco ACS Accept), but wh...

I just got a Westell 327w DSL modem/router/wireless AP combo from Verizon. 3 of my 4 laptops can associate with it. One--the only one with a Cisco card (a 350)--can not. This laptop can see the access point (e.g., its SSID), and has successfully asso...

Is it possible to configure 802.1x on 3550 using local username/pwd pairs? I'm tried but couldn't maek it work.Regards.

Hello,I do not get aaa authorization with Funk SBR EE to work.On our cisco switches I configure:aaa authentication default group radius localaaa authorization exec default radius localOn the Funk radius server I returnservice-type loginCisco-AVPAIR s...

Is it possible to separate by group membership users who can authenticate for VPN access only from users who can authenticate for VPN access AND network device access? My customer has some older network gear which does not support the AAA authorizati...

We are experiencing an issue with the radius request being sent to the client machine (the user trying to log in) instead of being handled in the server.We are using SESM software v 3.3.1To troubleshoot our problems we have established two test beds ...

Hello,I have a small problem when connecting to a console port. We make a connection via a terminalserver to the console port of a 6500 (Tacacs+). I like to have a banner before I login on CatOs. The problem with a MOTD is that only the banner is sho...

I want to create a group having priv 15 for one NDG's and priv 7 (or below ) for another NDG.In my current setup I have under teh "Enable options" set up one ndg with priv 15 and another ndg with 7. I also have under "Tacacs+ settings" Shell ticked a...

Hi All, can ACS 3.2 will provide me a logs for access-list? if yes then how can i configure this.Thanks & Regards,Ciscobuddy