Network Access Control

I'm running ACS 3.3. I have a bunch of Catalyst 3550 and 3560 switches, some running IOS 12.1(19)EA1c and others running IOS 12.2(20)SE1.All are configured for TACACS+ as follows:aaa new-modelaaa authentication login default group tacacs+ lineaaa aut...

My original goal is to have some ability of user management with our wireless authentication. Currently, we go through the local database on ACS, but we cannot manage these users to any great extent. My plan is to set up a test network where I am u...

Certain users who log into our 2950 switches login with privilege level 3 access and are only allowed to do the below. I want to remove the privilege statements from the router and have the command authorization component of our ACS (TACACS+) to set ...

Is it possible in ACS 3.0 to limit a user groups access to a specific network device group only? I need to set up several local administrator user groups with corresponding network device groups. User group "A" should have access to network device g...

I am modifying a TCL 2.0 script and I am trying to issue a "aaa authorize" command that will include the DNIS (Called-station-id). The Cisco sends the authorize request but it doesnt have the DNIS in it. It does have Calling-station-id and other AVs....

Hi, I am trying to configure a downloadble ACL(onto a Cisco Router with IOS ver 12.1 ) from a ACS 3.2 server. The authentication part goes well but then neither the authorization nor the downloadable ACL works. I am new to ACS configuration , Any go...

Hello, Can anyone, please explain to me why, when typing the above mentioned command (loggin in with a privilege level 14), I just get a partial output.The router has the following config:aaa authentication login default group tacacs+ localaaa authen...

Hi,I would like to generate hundreds of login/password and import them into ACS 3.2 databaseHow it can be done ?thanks

Hi,If you install ACS on a windows member server you have to create a user in the domain for the service that authenticates to AD.Is it possible that anyone tries to hack this account and the account becomes locked because of that ? In that case ACS ...

Hello, is it a size limit for the accountactions.csv ? 20 MB file size is acceptable ?Thank you in advanceByeRenato

Hi,I have a router configured with TACACS+ and SSH. I'm SSH from a workstation to the router. The router will authenticate with the TACACS server which located across a WAN. Will the traffic between the router to the server encrypted as well?

hi there, company is begining to roll out tacacs+ for network devices. We like the windows versions features (mostly LDAP support) but we're a pure unix shop.Has anyone ever found any unix version of a tacacs+ server that supports ldap?

I am using user authentication to validate users on the network. I am running ACS 3.2 on a Windows 2000 server. The customer is running Novell 6.1. I have set up an external database within ACS. This is a generic LDAP configuration. The problem i...

hi, i have enabled Pdm on my Pix 535 for my senior it security manager, in order for him to see what's going on. i created a username with level 1, but the problem is that when i log to the pix with that username, i am able to upgrade the level from ...

Hi:I want to use something like "command accountig" in pix 525; I mean I want to know what commands was executed or typed by administrator.Somebody knows if it is possible in PIX? My pix version is 6.3.3.Thank you.