Network Access Control

Hello,We are in a project of deploying 10.000 clients into the field. We want to assign a B class IP Pool(178.17.X.X) for this group of users. But as far as I know, CS ACS Win can support an IP Pool of whole C Class at most. Is there a configuration ...

All,I recently inherited the duties of an ACS 2.6 Server. I have built 2 other ACS boxes in the past (more recent versions), but I am perplexed by the configuration and the way ACS was configured. I looked at some logs, and realized that none of the ...

I'm using Radius (ACS 3.2) to authenticate users on VPN 3000 Concentrator.Radius Log file reports a message "Received unknown vsa attribute 22". This is a vsa in the authentication request message from VPN Concentrator, but it's not present into dict...

I need to configure limited access right for a specific user and the following config defines a local usernane BACKUP that can only ping. However, how can the user BACKUP telnet to vty 5.-----------------------------------------------enable secret le...

Product:C7401 IOS:12.3(9c)Feature:IP setFunction:BAS,LAC ROUTERPlease teach a meaning of this message.<messages>------------------------------------------------Apr 7 07:26:55 JST: %SSSMGR-3-NULL_INFO_STRING: Received a NULL infostring value.-Traceba...

Guys and Gals,I need to allow a level 9 user in my switches the ability to manage interfaces f0/1 to f0/44 but NOT interfaces f0/45 thru interface f0/48 (these are trunks). Any Idea why this does not work...privilege interface level 8 switchport port...

Set up ACS 3.3 to authenticate users agains an AD database.(EAP-TLS)I want to allow access by users who are authenticated by a Windows domain user database only when they have dial-in permission in their Windows account.I select the Yes, refer to "Gr...

Set up ACS to authenticate users agains an AD database.When using an invalid account name to log on to a device (switch), I see "External DB user invalid or bad password" in the ACS Failed attempts log but there is nothing in the Security logs of the...

We've just received this ACS server and upon looking up the install guide book, it's stating that "should not use monitor/keyboard/mouse" to connect to this ACS server but it does not say how do we get in this box to config ? we thought we could use ...

In ACS V3.3 I have an admin group.In the TACACS+ Settings I have configured , shell exec and privilege level 15, but when the users log into the router they get a level of one. Is ther another parameter I am missing?

I have following configuration: Catalyst 2950G-proximity switches with IOS 12.1(19)EA1c. Cisco Secure ACS Appliance 3.2.3.11 SunONE Directory Server ldap server version 5.2_Patch_2 I am trying to setup 802.1x authentication for wired and wireless cli...

HiI have a requirement similar to the way APs use MAC authentication on the ACS/RADIUS box. I want the switch to authenticate a "sensed" MAC address on a switchport using RADIUS. I assume that on RADIUS you'd have a list of MAC-Address "users" and ...

Hi,I need to allow and deny some user to go to the Internet, but I want to allow/deny only for http traffic.For exemple I dont want any user to have to authenticate if they want to use ftp.Is it possible with the auth-proxy? if yes any configuration ...

Can ACS 3.3 support nested groups within an external database (Active Directory)?For example, if I have map the AD group of Remote Users and that group is made up of groups New York and London, will it map correctly to Bob who is in the New York grou...

I have AAA configured to use Tacacs+ on a 7206VXR, when we telnet to the router and enter the user name and password it takes us to enable mode. When connected to the console it takes us to exec mode, then requires a passwrod to enter enable. Here ...