Network Access Control

I need help on the following please.1. - I am using ACS as TACACS server to control IOS authorization on all our Switches, However I can not deny telnet sessions to other devices from within CatOS - does anyone know the command authorization set to d...

I have a pix 506 for user remote access with pptp andcisco-vpn-client.The remote users are authenticated with a cisco acs 3.2When the remote user connect with cisco-vpn-client i see the caller-id in the radius accounting page on the acs , but when th...

Hi,,,I have the following error at the ACS ver 3.0 (Problem Authenticating from CSRadius. Got as far as Launching Request to Protocol Module..) caused the service to go down, the server did not respond to any AAA client (TACACS or RADIUS), i ping to ...

I will be upgrading a server from 3.0.1 to 3.3 and need to know the steps and expectations. What is the prcess of upgrading an ACS server from 3.0.1 to 3.3 and what type of problems should i expect.

Hello there...I'm having problem to configure the AAA server in my PIX506e, when i entered the following command, i can't access the firewall's pdm with correct password.#aaa-server AuthPIX protocol tacacs+#aaa-server AuthPIX (inside) host 192.168.1....

We're configuring a Dial-in access authenticated by Microsoft 2003 IAS Server.Here after the configuration :aaa new-modelaaa authentication ppp dialins radius localaaa authorization network default radius localaaa accounting exec default start-stop r...

hi,I would like to use tacacs+ on my pix 525 and I would like to know if there is an alternative to CSACS?I need something that I can install on 2 servers with replication option. I know that CSACS does what I want but I just wanted to know if there ...

I've the following problem.I'm trying to configure a RADIUS + local authentication for both telnet and dial-in access.So I've configured the router with the following linesaaa new-modelaaa authentication login default radius localaaa authentication p...

I am trying to authenticate users in a Catalyst 2950 against a ACS 3.2.I have deploy Active Directory.I need to authenticate users against this active directory but i have to use without certificates.Any idea?

Is it possible to block HTTP Basic Authentication packets in a router? Here is my problem. An internal website that uses unencrypted basic authentication works from every location but one. When I sniff the network on both sides of the router the pack...

I have stack of 2950 switches with TACACS configuration. I have user helpdesk with limited restricted right ( Shell authorization set)in ACS 3.0 config. My problem is that helpdesk user can run any any command on member switch when he issue rcommand ...

Can I replicate user and group databases from ACS for Windows to ACS Solution Engine ? I'm using the same version (3.3) and the same path.Tks.

Hi, We are looking to setup a remote support zone to different customers (more than 500) for our different software developers. The type of connections to customers can be PSTN/ISDN dialup, PPTP and ipsec L2L connections. We don't want that the conne...

All,Using Ciscosecure ACS on Windows NT. About a week ago, started getting following in the CSMON logfiles:Starting Auth test CSTacacsUpdated Password for CSTacacsStarting Login test CSTacacsLogging on to CSTacacs.Completed Auth test CSTacacs 0Auth F...