Network Access Control

Hi,I have a router configured with TACACS+ and SSH. I'm SSH from a workstation to the router. The router will authenticate with the TACACS server which located across a WAN. Will the traffic between the router to the server encrypted as well?

hi there, company is begining to roll out tacacs+ for network devices. We like the windows versions features (mostly LDAP support) but we're a pure unix shop.Has anyone ever found any unix version of a tacacs+ server that supports ldap?

I am using user authentication to validate users on the network. I am running ACS 3.2 on a Windows 2000 server. The customer is running Novell 6.1. I have set up an external database within ACS. This is a generic LDAP configuration. The problem i...

hi, i have enabled Pdm on my Pix 535 for my senior it security manager, in order for him to see what's going on. i created a username with level 1, but the problem is that when i log to the pix with that username, i am able to upgrade the level from ...

Hi:I want to use something like "command accountig" in pix 525; I mean I want to know what commands was executed or typed by administrator.Somebody knows if it is possible in PIX? My pix version is 6.3.3.Thank you.

ACS 3.3.1; configuration:aaa accounting commands 15 default start-stop group tacacs+aaa accounting connection default start-stop group tacacs+On the ACS the log under "TACACS+ accounting" isn't show session duration for logged-in user.any input is ve...

I've been seeing the following error fill our ACS failed attempts log sourced from one of of VPN concentrators. How do I go about finding the offender?Bad request from NAS

Pix 6.3(3) is only logging RADIUS info to ACS 3.2. Unfortunately, this does not log the internal IP address that is assigned to VPN user. Is there some way I can configure RADIUS or TACACS on Pix to send that info?

How to log failed SSH attempts to syslog server?We are using TACACS+, so getting log in ACS server but we want them to log into syslog server.Thanks a lot...

Hello everyone,I am trying to use ACS as RADIUS server to talk to an LDAP server to authenticate my VPN users. On the CiscoACS server, I have successfully mapped an External User DB (LDAP) to a CiscoSecure group. More, the VPN concentrator seems to ...

Hi,I am currently investigating 802.1x Authentication. I plan to turn it up in my 6500 network. Would love to hear any war stories from anyone who has already been down this road.Richard.rwallwork@espeed.co.uk

I am trying to configure my Pix 501 to authenticate incoming HTTP traffic on port 8081 through RADIUS.I thought that aaa authentication include tcp/8081 outside 10.10.1.109 255.255.255.255 0.0.0.0 0.0.0.0 smsradiusshould do the trick, but I don't get...

Why does command authorization only works for the vty line and NOT for the consoles?I use ACS for Win 3.3.(1)any input are very welcomeConfigurationaaa new-modelaaa authentication login VTY group tacacs+ localaaa authentication login CONSOLE group ta...

If I wich to remain on a UNIX platform and not move to the Windows platform, What are my short term and long term options?