Network Access Control

We set up aaa on a remote router, but did not establish a local logon user and password. Now when we try to telnet to the router it asks for username and password. yeah, this was a stupid move on our part, but is there anyway to get around aaa to l...

We have been using a VPN 3015 for approx 6 months successfully, however we have reached the user/group limit on the VPN. We have now purchased a Cisco ACS appliance to solve the limited user problem. What I am trying to accomplish is to configure the...

I have PIX 515 v6.3 configured to allow VPN Clients to connect using the Unified VPN Client 3.x.The VPN clients have been successfully establishing VPN Connection to the PIX for a while but beyond VPN Group Name and Password, the client isn't asked f...

We have a VPN 3000 which requires authentication through our ACS server using our Windows Domain.Our local policy on the Windows domain calls for the account to lock out after 5 bad attempts. However, when you type in incorrect accounts using the VP...

I am trying to setup VPN traffic through my PIX 515, to my Win2k AD environment. I am using Internet Access Server for RADIUS user and password resolution. When the tunnel is created through the PIX, IAS authenticates the user, but the PIX destroys...

Wireless scenario: a public, general-use SSID being used on all access points, plus a network management SSID in one particular location. Obviously, the datacenter access point needs to have multiple vlans configured and associated with the proper SS...

Dear All,We hv to implement authentication and authorizartion for Dialup VPN usersterminating on PIX firewall ...also we want to authorize the users to access onlyallowed network and not all the network.Kindly suggest how do we acheive this requirem...

All,In my environment I have a mix of PIX 525 appliances and FWSM's. We also employ TACACS in order to to access our firewalls, routers and switches. On our switches we are considering running directed-requests for tacacs. However, I can't locate ...

I’m unable to access my mail server using authentication from outside the network. I’ve disabled fixup using the “no fixup protocol smtp 25” command, performed a “clear xlat” and a “write memory” command; but so far nothing has worked. I’ve double ...

when setting up IPSec between Cisco VPN Client 4.0.4 and a PIX 525 ? First and foremost I guess, do I have to configure Xauth user authentication in order for IPSec to work between the VPN Client and PIX firewall? I do not have a TACACS+ server and...

How can I see what the command string that the router sends to the ACS for authorization? I tried debug aaa authorization but that didn't show anything.

HiHow can I allow a certain user or usergroup on ACS to have access only to a specific SSID? I know there is way, I just cannot find it anymore.thanks for any tip.

Hello all,I am trying out port authentication on a cisco catalyst 2950g-24-ei switch and am having the following problem:xp laptop ----------switch-----------Win 2k IASI have set up the cisco with the following commands :aaa new-modelaaa auth dot1x d...

HiI want to configure RADIUS authentication with a VPN client group.The others authentication with my RADIUS servers are correct.I configure this option with the CISCO PIX pdmbut it's don't work.Anyone can help me ?

Hi,I authenticate a Windows XP machine through a 3550 switch with a radius Windows 2003 with 802.1X EAP.The authentication of the machine is oK, the swith applies the attributes to the 802.1X port : a vlan ID and a Per-User acl.When the Per-User acl...