Network Access Control

Can someone please tell me if there is any way to define user roles on the ACS, as opposed to configuring all users locally to assign them.I have several users who will need to access the CiscoWorks server, and would like to avoid re-creating all of ...

Hi, I'm having a problem with Cisco Secure ACS 3.0, it is failing to authenticate users to log into the routers. We are using LDAP database to do authentication for the network devices. One of the ACS failed and I'm getting the followin error messa...

Hello,One of the Dial-in user has a problem to connect through RAS (3640 with 16 port Analog modem module with ver 12.2) . After initial handshaking , it gets immediately disconnected . What is(are) the debugging command's to check what's going on at...

First, is there a document that will show me the entire CSUtil syntax? I have seen bits and piece, but not everything. Also, can you modify a user account in such a manner that you can actually change it's Group? In other words, can I move jdoe fr...

I'm running 6.3(3) on PIX520; I need to locally (not TACACS+ or RADIUS) authencicate software VPN clients (4.0.3F) inbound thru PIX. Is this possible?

Hello all,Can pix send any accounting for event of login or logout Cisco VPN Client with ipsec vpn?What config need for this?Thanks in advance

Running ACSv3.0 on W2kACS3.0 has permitted a configuration of a single HTTP port for Administration Services of 2002. The documentation indicates that:a: This configuration should not be permittedb: 2002 should not be included in the configurationc:...

I wondered if anyone can help or shed any light on the following problem.I am getting an authentication error when doing a RADIUS authentication to CiscoSecure ACS 3.3 running on a Windows 2003 server, the authentication request is coming from a Cata...

dear membersi have a Cisco Secure ACS , with DOT1X Authentication,and also UCP configured. on the ACS it shows the Password for aparticular usere has expired but users are still able to log in with this password, am i doing a mistake in the configura...

I have a 1721 router running 122-15.T14 and want to implement authorization but the router does not provide command option for list name.I want to implement the following command:"aaa authorization network groupauthor group radius"but the only option...

Can get the VPN users to authenticate locally using 'aaa authentication login vpnuser local' but cannont get it to authenticate using 'aaa authentication login vpnuser group tacacs+' I know the Cisco ACS server is responding when I telnet to the Rout...

Hi ThereI have just successfully upgraded my ACS3.2(2) to v3.3 retaining the original configuration db. Although both the ACS and ACE applications work fine individually, the ACS is not passing the user login request to the ACE server (as per the con...